Description
In Play Framework 2.6.0 through 2.8.2, data amplification can occur when an application accepts multipart/form-data JSON input.
Remediation
References
https://www.playframework.com/security/vulnerability
https://www.playframework.com/security/vulnerability/CVE-2020-26882-JsonParseDataAmplification
Related Vulnerabilities
CVE-2013-6372 Vulnerability in maven package org.jenkins-ci.plugins:subversion
CVE-2014-3623 Vulnerability in maven package org.apache.wss4j:wss4j
CVE-2014-0168 Vulnerability in maven package org.jolokia:jolokia-core
CVE-2015-3250 Vulnerability in maven package org.apache.directory.api:api-ldap-client-all
CVE-2017-15703 Vulnerability in maven package org.apache.nifi:nifi-framework-cluster-protocol