CyberSecBulletin

Playframework vulnerabilities

We track 2 vulnerabilities in Playframework products. 2 are rated high or critical, and none are known to be exploited. The most recent was published on June 2, 2022.

2vulnerabilities
0critical
2high
0exploited
7.5average CVSS score

Latest Playframework vulnerabilities

  • 7.5 High severity

    playframework: Generation of Error Message Containing Sensitive Information

    CVE-2022-31023PlayframeworkEPSS 1.35%

    Play Framework is a web framework for Java and Scala. Verions prior to 2.8.16 are vulnerable to generation of error messages containing sensitive information. Play Framework, when run in dev mode, shows verbose errors for easy debugging, including an exception

  • 7.5 High severity

    playframework: Uncontrolled Resource Consumption

    CVE-2022-31018PlayframeworkEPSS 1.72%

    Play Framework is a web framework for Java and Scala. A denial of service vulnerability has been discovered in verions 2.8.3 through 2.8.15 of Play's forms library, in both the Scala and Java APIs. This can occur when using either the `Form#bindFromRequest` me