Lucene search
+L

5 matches found

OSV
OSV
•added 2022/02/09 10:54 p.m.•169 views

GHSA-V9MF-JGQ3-C28H Data Amplification in Play Framework

An issue was discovered in Play Framework 2.8.0 through 2.8.4. Carefully crafted JSON payloads sent as a form field lead to Data Amplification. This affects users migrating from a Play version prior to 2.8.0 that used the Play Java API to serialize classes with protected or private fields to JSON...

2.7CVSS3.4AI score0.00969EPSS
SaveExploits0References3
Github Security Blog
Github Security Blog
•added 2022/02/09 10:54 p.m.•62 views

Data Amplification in Play Framework

An issue was discovered in Play Framework 2.8.0 through 2.8.4. Carefully crafted JSON payloads sent as a form field lead to Data Amplification. This affects users migrating from a Play version prior to 2.8.0 that used the Play Java API to serialize classes with protected or private fields to JSON...

4CVSS4.6AI score0.00969EPSS
SaveExploits0References4Affected Software1
OSV
OSV
•added 2020/12/03 5:15 p.m.•48 views

CVE-2020-28923

An issue was discovered in Play Framework 2.8.0 through 2.8.4. Carefully crafted JSON payloads sent as a form field lead to Data Amplification. This affects users migrating from a Play version prior to 2.8.0 that used the Play Java API to serialize classes with protected or private fields to JSON...

2.7CVSS6.7AI score
SaveExploits0References2
NVD
NVD
•added 2020/12/03 5:15 p.m.•53 views

CVE-2020-28923

An issue was discovered in Play Framework 2.8.0 through 2.8.4. Carefully crafted JSON payloads sent as a form field lead to Data Amplification. This affects users migrating from a Play version prior to 2.8.0 that used the Play Java API to serialize classes with protected or private fields to JSON...

4CVSS3.6AI score0.00969EPSS
SaveExploits0References2
Cvelist
Cvelist
•added 2020/12/03 4:21 p.m.•49 views

CVE-2020-28923

An issue was discovered in Play Framework 2.8.0 through 2.8.4. Carefully crafted JSON payloads sent as a form field lead to Data Amplification. This affects users migrating from a Play version prior to 2.8.0 that used the Play Java API to serialize classes with protected or private fields to JSON...

3.5AI score0.00969EPSS
SaveExploits0References2
Rows per page
Query Builder