CVE-2020-12480
1 advisory.
Maven/com.typesafe.play:play_2.12 CVE-2020-12480: medium 6.5, EPSS 0.53%
CSRF in Play Framework
Action: Upgrade com.typesafe.play:play_2.12 to 2.7.5 (2.7.x) or 2.8.2 (2.8.x) or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 2.7.5 | - |
| 2.8.0 | 2.8.2 | - |
Fixed versions
| 2.7.5 | 2.8.2 |
Sources
- osv: GHSA-cf8j-64h9-6q58
- https://nvd.nist.gov/vuln/detail/CVE-2020-12480
- https://github.com/playframework/playframework/pull/10285
- https://github.com/playframework/playframework/commit/c82de44fc50b7c58c6e0580f1f67ff08aa7bd154
- https://github.com/playframework/playframework
- https://www.playframework.com/security/vulnerability
- https://www.playframework.com/security/vulnerability/CVE-2020-12480-CsrfBlacklistBypass
CVE-2020-12480 · published · modified · JSON