Lucene search
K

5 matches found

Github Security Blog
Github Security Blog
added 2022/02/09 10:54 p.m.48 views

Data Amplification in Play Framework

An issue was discovered in Play Framework 2.8.0 through 2.8.4. Carefully crafted JSON payloads sent as a form field lead to Data Amplification. This affects users migrating from a Play version prior to 2.8.0 that used the Play Java API to serialize classes with protected or private fields to JSON...

4CVSS4.6AI score0.00957EPSS
Exploits0References4Affected Software1
OSV
OSV
added 2022/02/09 10:54 p.m.21 views

GHSA-V9MF-JGQ3-C28H Data Amplification in Play Framework

An issue was discovered in Play Framework 2.8.0 through 2.8.4. Carefully crafted JSON payloads sent as a form field lead to Data Amplification. This affects users migrating from a Play version prior to 2.8.0 that used the Play Java API to serialize classes with protected or private fields to JSON...

2.7CVSS3.4AI score0.00957EPSS
Exploits0References3
NVD
NVD
added 2020/12/03 5:15 p.m.23 views

CVE-2020-28923

An issue was discovered in Play Framework 2.8.0 through 2.8.4. Carefully crafted JSON payloads sent as a form field lead to Data Amplification. This affects users migrating from a Play version prior to 2.8.0 that used the Play Java API to serialize classes with protected or private fields to JSON...

4CVSS3.6AI score0.00957EPSS
Exploits0References2
OSV
OSV
added 2020/12/03 5:15 p.m.41 views

CVE-2020-28923

An issue was discovered in Play Framework 2.8.0 through 2.8.4. Carefully crafted JSON payloads sent as a form field lead to Data Amplification. This affects users migrating from a Play version prior to 2.8.0 that used the Play Java API to serialize classes with protected or private fields to JSON...

2.7CVSS6.7AI score0.00957EPSS
Exploits0References2
Cvelist
Cvelist
added 2020/12/03 4:21 p.m.27 views

CVE-2020-28923

An issue was discovered in Play Framework 2.8.0 through 2.8.4. Carefully crafted JSON payloads sent as a form field lead to Data Amplification. This affects users migrating from a Play version prior to 2.8.0 that used the Play Java API to serialize classes with protected or private fields to JSON...

3.5AI score0.00957EPSS
Exploits0References2
Rows per page
Query Builder