medium6.5
CVE-2020-12480
In Play Framework 2.6.0 through 2.8.1, the CSRF filter can be bypassed by making CORS simple requests with content types that contain parameters that can't be …
Impact
In Play Framework 2.6.0 through 2.8.1, the CSRF filter can be bypassed by making CORS simple requests with content types that contain parameters that can't be parsed.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lightbend | Play Framework | from 2.6.0 through 2.6.25 from 2.7.0 through 2.7.4 from 2.8.0 through 2.8.1 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.playframework.com/security/vulnerability
- https://www.playframework.com/security/vulnerability/CVE-2020-12480-CsrfBlacklistBypass
- https://www.playframework.com/security/vulnerability
- https://www.playframework.com/security/vulnerability/CVE-2020-12480-CsrfBlacklistBypass