Description
In Play Framework 2.6.0 through 2.8.1, the CSRF filter can be bypassed by making CORS simple requests with content types that contain parameters that can't be parsed.
Remediation
References
https://www.playframework.com/security/vulnerability
https://www.playframework.com/security/vulnerability/CVE-2020-12480-CsrfBlacklistBypass
Related Vulnerabilities
CVE-2020-2275 Vulnerability in maven package org.jenkins-ci.plugins:copy-data-to-workspace-plugin
CVE-2014-0099 Vulnerability in maven package org.apache.tomcat:tomcat-coyote
CVE-2020-17150 Vulnerability in npm package typescript-tslint-plugin
CVE-2023-46589 Vulnerability in maven package org.apache.tomcat:tomcat-catalina