GitHub Advisoryadvisory · Maven
GHSA-r8rm-4hfj-2x87 Data Amplification in Play Framework
HIGH
Official page ↗
- Aliases
- CVE-2020-26882
- Ecosystem
- Maven
- Packages
- com.typesafe.play:play
- Severity
- High
- CVSS vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
- Weaknesses
- CWE-674
- Reviewed
- 2021-04-22
Affected packages
• Maven com.typesafe.play:play: >= 2.6.0, < 2.7.6 → fixed in 2.7.6
• Maven com.typesafe.play:play: >= 2.8.0, < 2.8.3 → fixed in 2.8.3
Description
In Play Framework 2.6.0 through 2.8.2, data amplification can occur when an application accepts multipart/form-data JSON input.
Related
Alias · CVE (1)
- CVE-2020-26882 In Play Framework 2.6.0 through 2.8.2, data amplification can occur when an application accepts multipart/form-data JSON input. vulnerability
Weakness · CWE (1)
- CWE-674 Uncontrolled Recursion weakness