5 matches found
by.exonit.redmine.client:client-play26-ws_2.12 (>=5.0.0-rc1, <=5.0.0), ch.datascience:renku-commons_2.12 (0.2.0) +96 more potentially affected by CVE-2019-17598 via com.typesafe.play:play-ws_2.12 (>=2.6.0-m1, <=2.6.23)
com.typesafe.play:play-ws2.12 MAVEN version =2.6.0-m1, =5.0.0-rc1, =2.0.0-rc0, =1.0.0, =7.6.0play2.6, =10.0.0play2.6, =10.0.0play2.6, =10.0.0play2.6, =0.4.0, =0.4.0, =0.1.0, =0.2.3 - com.elegantmonkeys:lagom-javadsl-google-pubsub-broker2.12 1.0.0-rc1 -...
by.exonit.redmine.client:client-play26-ws_2.12 (>=5.0.0-rc1, <=5.0.0), ch.datascience:renku-commons_2.12 (0.2.0) +96 more potentially affected by CVE-2019-17598 via com.typesafe.play:play-ws_2.12 (>=2.6.0-m1, <=2.6.23)
com.typesafe.play:play-ws2.12 MAVEN version =2.6.0-m1, =5.0.0-rc1, =2.0.0-rc0, =1.0.0, =7.6.0play2.6, =10.0.0play2.6, =10.0.0play2.6, =10.0.0play2.6, =0.4.0, =0.4.0, =0.1.0, =0.2.3 - com.elegantmonkeys:lagom-javadsl-google-pubsub-broker2.12 1.0.0-rc1 -...
CVE-2019-17598
An issue was discovered in Lightbend Play Framework 2.5.x through 2.6.23. When configured to make requests using an authenticated HTTP proxy, play-ws may sometimes, typically under high load, when connecting to a target host using https, expose the proxy credentials to the target host...
CVE-2019-17598
CVE-2019-17598 affects Lightbend Play Framework (2.5.x–2.6.23) and its play-ws component. When configured to proxy requests through an authenticated HTTP proxy, under high load, HTTPS connections to a target host may reveal proxy credentials to that host. Impact is information disclosure; details...
by.exonit.redmine.client:client-play26-ws_2.12 (>=5.0.0-rc1, <=5.0.0), ch.datascience:renku-commons_2.12 (0.2.0) +96 more potentially affected by CVE-2019-17598 via com.typesafe.play:play-ws_2.12 (>=2.6.0-m1, <=2.6.23)
com.typesafe.play:play-ws2.12 MAVEN version =2.6.0-m1, =5.0.0-rc1, =2.0.0-rc0, =1.0.0, =7.6.0play2.6, =10.0.0play2.6, =10.0.0play2.6, =10.0.0play2.6, =0.4.0, =0.4.0, =0.1.0, =0.2.3 - com.elegantmonkeys:lagom-javadsl-google-pubsub-broker2.12 1.0.0-rc1 -...