CVE-2020-26882
- Source
- https://cve.org/CVERecord?id=CVE-2020-26882
- Import Source
- https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-26882.json
- JSON Data
- https://api.osv.dev/v1/vulns/CVE-2020-26882
- Aliases
- Published
- 2020-11-06T14:15:16Z
- Modified
- 2026-07-08T23:35:14Z
- Severity
-
- 7.5 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H CVSS Calculator
- Summary
- [none]
- Details
-
In Play Framework 2.6.0 through 2.8.2, data amplification can occur when an application accepts multipart/form-data JSON input.
- References
Affected packages
Git / github.com/playframework/playframework
Affected ranges
- Type
- GIT
- Repo
- https://github.com/playframework/playframework
- Events
-
Introduced0 Unknown introduced commit / All previous commits are affectedLast AffectedIntroducedLast AffectedIntroducedLast Affected
- Database specific
-
Show details
{ "cpe": "cpe:2.3:a:lightbend:play_framework:*:*:*:*:*:*:*:*", "extracted_events": [ { "introduced": "0" }, { "last_affected": "2.6.25" }, { "introduced": "2.7.0" }, { "last_affected": "2.7.5" }, { "introduced": "2.8.0" }, { "last_affected": "2.8.2" } ], "source": "CPE_RANGE" }
Affected versions
2.*
2.0
2.0-RC1
2.0-RC2
2.0-RC3
2.0-RC4
2.0-RC5
2.0-beta
2.1-RC1
2.1-RC2
2.1-RC3
2.2.0-M1
2.2.0-M2
2.2.0-M3
2.2.0-RC1
2.3-M1
2.3.0-RC1
2.4.0-M1
2.4.0-M2
2.4.0-M3
2.4.0-RC1
2.4.0-RC2
2.4.0-RC3
2.5.0
2.5.0-M1
2.5.0-M2
2.5.0-RC1
2.5.0-RC2
2.6.0
2.6.0-M1
2.6.0-M2
2.6.0-M3
2.6.0-M4
2.6.0-M5
2.6.0-RC1
2.6.0-RC2
2.6.1
2.6.10
2.6.11
2.6.12
2.6.13
2.6.14
2.6.15
2.6.16
2.6.17
2.6.18
2.6.19
2.6.2
2.6.20
2.6.21
2.6.22
2.6.23
2.6.24
2.6.25
2.6.3
2.6.4
2.6.5
2.6.6
2.6.7
2.6.8
2.6.9
2.7.0
2.7.1
2.7.2
2.7.3
2.7.4
2.7.5
2.8.0
2.8.1
2.8.2