PF
Product
Play Framework
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Severity mix
Critical 1High 8Medium 1Low 1
Watch
Add Play Framework to your stack to get only the CVEs that touch what you run.
| CVE | CVSS | Published | Summary · affected versions |
|---|---|---|---|
| CVE-2022-31023 | 7.5 | Jun 2 | Play Framework is a web framework for Java and Scala Affected: before 2.8.16 |
| CVE-2022-31018 | 7.5 | Jun 2 | Play Framework is a web framework for Java and Scala Affected: 2.8.3 through 2.8.15 |
| CVE-2020-27196 | 7.5 | Nov 6 | An issue was discovered in PlayJava in Play Framework 2.6.0 through 2.8.2 Affected: through 2.6.25; 2.7.0 through 2.7.5; 2.8.0 through 2.8.2 |
| CVE-2020-26883 | 7.5 | Nov 6 | In Play Framework 2.6.0 through 2.8.2, stack consumption can occur because of unbounded recursion during parsing of crafted JSON documents Affected: through 2.6.25; 2.7.0 through 2.7.5; 2.8.0 through 2.8.2 |
| CVE-2020-26882 | 7.5 | Nov 6 | In Play Framework 2.6.0 through 2.8.2, data amplification can occur when an application accepts multipart/form-data JSON input Affected: through 2.6.25; 2.7.0 through 2.7.5; 2.8.0 through 2.8.2 |
| CVE-2019-17598 | 7.5 | Nov 5 | An issue was discovered in Lightbend Play Framework 2.5.x through 2.6.23 Affected: 2.5.0 through 2.5.19; 2.6.0 through 2.6.23 |
| CVE-2018-13864 | 7.5 | Jul 17 | A directory traversal vulnerability has been found in the Assets controller in Play Framework 2.6.12 through 2.6.15 (fixed in 2.6.16) when running on Windows Affected: 2.6.12 through 2.6.15 |
| CVE-2015-2156 | 7.5 | Oct 18 | Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to… Affected: 2.0; 2.0; 2.0; 2.0.2; 2.0.2; 2.0.2; +32 more |
Showing 8