CVE-2020-12480

In Play Framework 2.6.0 through 2.8.1, the CSRF filter can be bypassed by making CORS simple requests with content types that contain parameters that can't be…

published August 17, 2020

CVSS
—
EPSS
1%
Percentile
43.7
In the wild
Unconfirmed
What it is

In Play Framework 2.6.0 through 2.8.1, the CSRF filter can be bypassed by making CORS simple requests with content types that contain parameters that can't be parsed.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00525 · 43.7th percentile
Published
2020-08-17T20:45Z
EPSS history
Timeline
  • 17 AUG 20:45Z
    In Play Framework 2.6.0 through 2.8.1, the CSRF filter can be bypassed by making CORS simple requests with content types that contain parameters that can't be…
    cvelistv5