2 matches found
CVE-2020-12480
In Play Framework 2.6.0 through 2.8.1, the CSRF filter can be bypassed by making CORS simple requests with content types that contain parameters that can't be parsed...
6.5CVSS6.9AI score0.00525EPSS
SaveExploits0References1
CVE-2020-12480: Cross-Site Request Forgery (CSRF)
In Play Framework 2.6.0 through 2.8.1, the CSRF filter can be bypassed by making CORS simple requests with content types that contain parameters that can't be parsed...
6.5CVSS5.8AI score0.00525EPSS
SaveExploits0References2
20