{"action":"Upgrade com.typesafe.play:play to 2.8.5 or later.","affected":[{"fixed":"2.8.5","introduced":"2.8.0"}],"component":"com.typesafe.play:play","cve_ids":["CVE-2020-28923"],"ecosystem":"Maven","epss":0.00969,"exploited":false,"fixed_versions":["2.8.5"],"ghsa_id":"GHSA-v9mf-jgq3-c28h","id":"tcs_01M5N9DRTDV8FF0T845J5FRC7S","modified_at":"2023-11-08T04:03:29.644045Z","published_at":"2022-02-09T22:54:21Z","references":["https://osv.dev/vulnerability/GHSA-v9mf-jgq3-c28h","https://nvd.nist.gov/vuln/detail/CVE-2020-28923","https://www.playframework.com/security/vulnerability","https://www.playframework.com/security/vulnerability/CVE-2020-28923-ImproperRemovalofSensitiveInformationBeforeStorageorTransfer"],"severity":{"label":"low","score":2.7},"sources":[{"source":"osv","source_id":"GHSA-v9mf-jgq3-c28h","url":"https://osv.dev/vulnerability/GHSA-v9mf-jgq3-c28h"}],"summary":"Data Amplification in Play Framework"}