Description
An issue was discovered in Play Framework 2.8.0 through 2.8.4. Carefully crafted JSON payloads sent as a form field lead to Data Amplification. This affects users migrating from a Play version prior to 2.8.0 that used the Play Java API to serialize classes with protected or private fields to JSON.
Remediation
References
Related Vulnerabilities
TYPO3 CVE-2024-25118 Vulnerability (CVE-2024-25118)
WordPress Plugin Gravity Forms FreshDesk Cross-Site Scripting (1.2.8)
Oracle Application Server CVE-2007-5518 Vulnerability (CVE-2007-5518)
WordPress Plugin Maintenance Cross-Site Request Forgery (3.6.4)
WordPress Plugin WP Reset-Most Advanced WordPress Reset Tool Cross-Site Scripting (1.86)