Description
In Play Framework 2.6.0 through 2.8.2, data amplification can occur when an application accepts multipart/form-data JSON input.
Remediation
References
Related Vulnerabilities
WordPress Plugin Image Rotator Cross-Site Scripting (1.0)
IBM WebSEAL Incorrect Authorization Vulnerability (CVE-2023-38368)
Joomla Incorrect Authorization Vulnerability (CVE-2010-1435)
e107 Cross-Site Request Forgery (CSRF) Vulnerability (CVE-2011-4947)
MediaWiki Exposure of Sensitive Information to an Unauthorized Actor Vulnerability (CVE-2015-6727)