Skip to content
OpenAdvisories

Package · Maven

com.typesafe.play:play_2.12

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • Medium 5.9
    CVE-2022-31023

    Dev error stack trace leaking into prod in Play Framework

    Play Framework is a web framework for Java and Scala. Verions prior to 2.8.16 are vulnerable to generation of error messages containing sensitive information. Play Framework, when run in dev mode, shows verbose errors for easy debugging, including an exceptio…

    playframework playframework com.typesafe.play:play_2.12 com.typesafe.play:play_2.13 Maven
  • High 7.5
    CVE-2022-31018

    Denial of service binding form from JSON in Play Framework

    Play Framework is a web framework for Java and Scala. A denial of service vulnerability has been discovered in verions 2.8.3 through 2.8.15 of Play's forms library, in both the Scala and Java APIs. This can occur when using either the `Form#bindFromRequest` m…

    playframework playframework com.typesafe.play:play_2.12 com.typesafe.play:play_2.13 Maven
  • Medium 6.5
    CVE-2020-12480

    CSRF in Play Framework

    In Play Framework 2.6.0 through 2.8.1, the CSRF filter can be bypassed by making CORS simple requests with content types that contain parameters that can't be parsed.

    com.typesafe.play:play_2.12 Maven
  • High 7.5
    CVE-2018-13864 Public exploit

    Play Framework's Assets controller vulnerable to directory traversal

    A directory traversal vulnerability has been found in the Assets controller in Play Framework 2.6.12 through 2.6.15 (fixed in 2.6.16) when running on Windows. It allows a remote attacker to download arbitrary files from the target server via specially crafted…

    com.typesafe.play:play_2.12 Maven