Vulmon
Recent Vulnerabilities
Research Posts
Trends
Blog
About
Contact
Vulmon Alerts
By Relevance
By Risk Score
By Publish Date
lightbend vulnerabilities and exploits
(subscribe to this query)
7.5
CVSSv3
CVE-2018-18854
Lightbend Spray spray-json up to and including 1.3.4 allows remote malicious users to cause a denial of service (resource consumption) because of Algorithmic Complexity during the parsing of many JSON object fields (with keys that have the same hash code).
Lightbend Spray-json
2.7
CVSSv3
CVE-2020-28923
An issue exists in Play Framework 2.8.0 up to and including 2.8.4. Carefully crafted JSON payloads sent as a form field lead to Data Amplification. This affects users migrating from a Play version before 2.8.0 that used the Play Java API to serialize classes with protected or pri...
Lightbend Play Framework
7.5
CVSSv3
CVE-2020-26882
In Play Framework 2.6.0 up to and including 2.8.2, data amplification can occur when an application accepts multipart/form-data JSON input.
Lightbend Play Framework
7.5
CVSSv3
CVE-2020-26883
In Play Framework 2.6.0 up to and including 2.8.2, stack consumption can occur because of unbounded recursion during parsing of crafted JSON documents.
Lightbend Play Framework
7.5
CVSSv3
CVE-2020-27196
An issue exists in PlayJava in Play Framework 2.6.0 up to and including 2.8.2. The body parsing of HTTP requests eagerly parses a payload given a Content-Type header. A deep JSON structure sent to a valid POST endpoint (that may or may not expect JSON payloads) causes a StackOver...
Lightbend Play Framework
6.5
CVSSv3
CVE-2020-12480
In Play Framework 2.6.0 up to and including 2.8.1, the CSRF filter can be bypassed by making CORS simple requests with content types that contain parameters that can't be parsed.
Lightbend Play Framework
6.5
CVSSv3
CVE-2021-23339
This affects all versions prior to 10.1.14 and from 10.2.0 to 10.2.4 of package com.typesafe.akka:akka-http-core. It allows multiple Transfer-Encoding headers.
Lightbend Akka-http
7.5
CVSSv3
CVE-2022-31018
Play Framework is a web framework for Java and Scala. A denial of service vulnerability has been discovered in verions 2.8.3 up to and including 2.8.15 of Play's forms library, in both the Scala and Java APIs. This can occur when using either the `Form#bindFromRequest` metho...
Lightbend Play Framework
7.5
CVSSv3
CVE-2022-31023
Play Framework is a web framework for Java and Scala. Verions before 2.8.16 are vulnerable to generation of error messages containing sensitive information. Play Framework, when run in dev mode, shows verbose errors for easy debugging, including an exception stack trace. Play doe...
Lightbend Play Framework
CVSSv3
CVSSv2
CVSSv3
VMScore
Recommendations:
man-in-the-middle
CVE-2024-34558
CVE-2024-32674
CVE-2024-34351
XPath injection
CVE-2023-45866
CVE-2024-25528
CVE-2024-25517
path traversal
Vulnerability Notification Service
You don’t have to wait for vulnerability scanning results
Get Started
« PREV
1
2