Description
In Play Framework 2.6.0 through 2.8.2, data amplification can occur when an application accepts multipart/form-data JSON input.
Remediation
References
https://www.playframework.com/security/vulnerability
https://www.playframework.com/security/vulnerability/CVE-2020-26882-JsonParseDataAmplification
Related Vulnerabilities
CVE-2016-4974 Vulnerability in maven package org.apache.qpid:qpid-jms-client
CVE-2023-36542 Vulnerability in maven package org.apache.nifi:nifi-hbase_2-client-service
CVE-2012-0047 Vulnerability in maven package org.apache.wicket:wicket
CVE-2023-43795 Vulnerability in maven package org.geoserver.extension:gs-wps-core
CVE-2023-34238 Vulnerability in npm package gatsby-plugin-mdx