{"action":"Upgrade com.typesafe.play:play_2.12 to 2.7.5 (2.7.x) or 2.8.2 (2.8.x) or later.","affected":[{"fixed":"2.7.5","introduced":"0"},{"fixed":"2.8.2","introduced":"2.8.0"}],"component":"com.typesafe.play:play_2.12","cve_ids":["CVE-2020-12480"],"ecosystem":"Maven","epss":0.00525,"exploited":false,"fixed_versions":["2.7.5","2.8.2"],"ghsa_id":"GHSA-cf8j-64h9-6q58","id":"tcs_01M5N8S88RH1K5H5Z8FN86BZ9C","modified_at":"2023-11-08T04:02:10.309011Z","published_at":"2020-08-18T17:30:25Z","references":["https://osv.dev/vulnerability/GHSA-cf8j-64h9-6q58","https://nvd.nist.gov/vuln/detail/CVE-2020-12480","https://github.com/playframework/playframework/pull/10285","https://github.com/playframework/playframework/commit/c82de44fc50b7c58c6e0580f1f67ff08aa7bd154","https://github.com/playframework/playframework","https://www.playframework.com/security/vulnerability","https://www.playframework.com/security/vulnerability/CVE-2020-12480-CsrfBlacklistBypass"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-cf8j-64h9-6q58","url":"https://osv.dev/vulnerability/GHSA-cf8j-64h9-6q58"}],"summary":"CSRF in Play Framework"}