high7.5
CVE-2020-26883
In Play Framework 2.6.0 through 2.8.2, stack consumption can occur because of unbounded recursion during parsing of crafted JSON documents.
Impact
In Play Framework 2.6.0 through 2.8.2, stack consumption can occur because of unbounded recursion during parsing of crafted JSON documents.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Lightbend | Play Framework | through 2.6.25 from 2.7.0 through 2.7.5 from 2.8.0 through 2.8.2 |
Weakness classification
References
- NVD record
- CVE.org record
- https://www.playframework.com/security/vulnerability
- https://www.playframework.com/security/vulnerability/CVE-2020-26883-JsonParseUncontrolledRecursion
- https://www.playframework.com/security/vulnerability
- https://www.playframework.com/security/vulnerability/CVE-2020-26883-JsonParseUncontrolledRecursion