Security Advisory

CVE-2020-28923

CVE vulnerability detail - eXtreme Datacenter Security Operations

Published 2020-12-03 16:21:31

Last updated 2024-08-04 16:41:00

Assigner mitre

CVSS score not scored

State PUBLISHED

Description

An issue was discovered in Play Framework 2.8.0 through 2.8.4. Carefully crafted JSON payloads sent as a form field lead to Data Amplification. This affects users migrating from a Play version prior to 2.8.0 that used the Play Java API to serialize classes with protected or private fields to JSON.

← Browse all CVEs View on cve.org ↗