Information Disclosure

play2.12 is vulnerable to information disclosure. The vulnerability exists due to the improper configuration use in DefaultHttpErrorHandler, allowing an attacker to gain access to sensitive information through the error message in stack trace by providing some invalid values...

Denial Of Service (DoS)

play2.12 is vulnerable to denial of service. The vulnerability exists when using the FormbindFromRequest method on a JSON request body or the Formbind method directly on a JSON value, allowing an attacker to crash the application through the OutOfMemoryError by providing a deeply-nested JSON obje...