TI-2022-13068 CVE-2022-31023 · GHSA-p9p4-97g9-wcrh
Dev error stack trace leaking into prod in Play Framework
Priority LOW 36
Play Framework is a web framework for Java and Scala.
Vulnerabilities
11 records
TI-2022-13063 CVE-2022-31018 · GHSA-v8x6-59g4-5g3w
Denial of service binding form from JSON in Play Framework
Priority MEDIUM 42
Play Framework is a web framework for Java and Scala.
TI-2020-17455 CVE-2020-28923 · GHSA-v9mf-jgq3-c28h
An issue was discovered in Play Framework 2.8.0 through 2.8.4.
Priority LOW 16
An issue was discovered in Play Framework 2.8.0 through 2.8.4.
TI-2020-16311 CVE-2020-26882 · GHSA-r8rm-4hfj-2x87
In Play Framework 2.6.0 through 2.8.2, data amplification can occur when an application…
Priority LOW 36
In Play Framework 2.6.0 through 2.8.2, data amplification can occur when an application accepts multipart/form-data JSON input.
TI-2020-16533 CVE-2020-27196 · GHSA-h48w-c35p-6m8x
An issue was discovered in PlayJava in Play Framework 2.6.0 through 2.8.2.
Priority LOW 36
An issue was discovered in PlayJava in Play Framework 2.6.0 through 2.8.2.
TI-2020-16312 CVE-2020-26883 · GHSA-p8p6-rcp6-4mrm
In Play Framework 2.6.0 through 2.8.2, stack consumption can occur because of unbounded…
Priority LOW 36
In Play Framework 2.6.0 through 2.8.2, stack consumption can occur because of unbounded recursion during parsing of crafted JSON documents.
TI-2020-09980 CVE-2020-12480 · GHSA-cf8j-64h9-6q58
In Play Framework 2.6.0 through 2.8.1, the CSRF filter can be bypassed by making CORS…
Priority LOW 29
In Play Framework 2.6.0 through 2.8.1, the CSRF filter can be bypassed by making CORS simple requests with content types that contain parameters that can't be parsed.
TI-2019-13133 CVE-2019-17598 · GHSA-442g-gcg6-mhm4
An issue was discovered in Lightbend Play Framework 2.5.x through 2.6.23.
Priority LOW 34
An issue was discovered in Lightbend Play Framework 2.5.x through 2.6.23.
TI-2018-10054 CVE-2018-13864 · GHSA-v4mq-p756-p4f5
A directory traversal vulnerability has been found in the Assets controller in Play…
Priority LOW 39
A directory traversal vulnerability has been found in the Assets controller in Play Framework 2.6.12 through 2.6.15 (fixed in 2.6.16) when running on Windows.
TI-2014-02951 CVE-2014-3630 · GHSA-xpw4-hqm8-rj97
XML external entity (XXE) vulnerability in the Java XML processing functionality in Play…
Priority MEDIUM 47
XML external entity (XXE) vulnerability in the Java XML processing functionality in Play before 2.2.6 and 2.3.x before 2.3.5 might allow remote attackers to read arbitrary files, cause a denial of service, or have unspec…
TI-2015-01932 CVE-2015-2156 · GHSA-xfv3-rrfm-f2rv
Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and…
Priority MEDIUM 41
Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to bypass the httpOnly flag on cookies and ob…