Login Request a demo
PF
Product
Play Framework
by Lightbend · last CVE Jun 2, 2022
11
CVEs
0
On KEV
9.8
Max CVSS
0
New 30D
Vulnerabilities11In the news0Timeline
Severity mix
Critical 1High 8Medium 1Low 1
Severity
All severities11Critical1High8Medium1Low1
Exploitation
On CISA KEV0Exploited in the wild0
Watch

Add Play Framework to your stack to get only the CVEs that touch what you run.

CVECVSSEPSSPublishedSummary · affected versions
CVE-2014-3630
9.8
3%
Dec 29
XML external entity (XXE) vulnerability in the Java XML processing functionality in Play before 2.2.6 and 2.3.x before 2.3.5 might allow remote attackers to read arbitrary files,…
Affected: 2.2.0; 2.2.0; 2.2.0; 2.2.0; 2.2.1; 2.2.2; +9 more
CVE-2022-31023
7.5
1%
Jun 2
Play Framework is a web framework for Java and Scala
Affected: before 2.8.16
CVE-2022-31018
7.5
2%
Jun 2
Play Framework is a web framework for Java and Scala
Affected: 2.8.3 through 2.8.15
CVE-2020-27196
7.5
1%
Nov 6
An issue was discovered in PlayJava in Play Framework 2.6.0 through 2.8.2
Affected: through 2.6.25; 2.7.0 through 2.7.5; 2.8.0 through 2.8.2
CVE-2020-26883
7.5
1%
Nov 6
In Play Framework 2.6.0 through 2.8.2, stack consumption can occur because of unbounded recursion during parsing of crafted JSON documents
Affected: through 2.6.25; 2.7.0 through 2.7.5; 2.8.0 through 2.8.2
CVE-2020-26882
7.5
1%
Nov 6
In Play Framework 2.6.0 through 2.8.2, data amplification can occur when an application accepts multipart/form-data JSON input
Affected: through 2.6.25; 2.7.0 through 2.7.5; 2.8.0 through 2.8.2
CVE-2019-17598
7.5
1%
Nov 5
An issue was discovered in Lightbend Play Framework 2.5.x through 2.6.23
Affected: 2.5.0 through 2.5.19; 2.6.0 through 2.6.23
CVE-2018-13864
7.5
3%
Jul 17
A directory traversal vulnerability has been found in the Assets controller in Play Framework 2.6.12 through 2.6.15 (fixed in 2.6.16) when running on Windows
Affected: 2.6.12 through 2.6.15
CVE-2015-2156
7.5
5%
Oct 18
Netty before 3.9.8.Final, 3.10.x before 3.10.3.Final, 4.0.x before 4.0.28.Final, and 4.1.x before 4.1.0.Beta5 and Play Framework 2.x before 2.3.9 might allow remote attackers to…
Affected: 2.0; 2.0; 2.0; 2.0.2; 2.0.2; 2.0.2; +32 more
CVE-2020-12480
6.5
1%
Aug 17
In Play Framework 2.6.0 through 2.8.1, the CSRF filter can be bypassed by making CORS simple requests with content types that contain parameters that can't be parsed
Affected: 2.6.0 through 2.6.25; 2.7.0 through 2.7.4; 2.8.0 through 2.8.1
CVE-2020-28923
2.7
1%
Dec 3
An issue was discovered in Play Framework 2.8.0 through 2.8.4
Affected: 2.8.0 through 2.8.4
Showing 11