[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"$f60FYE3KPHxZcg-0XDNVLKLs_UJOVBKAqxV94KhJ4d40":3,"g5a-risk:CVE-2020-28923":105},{"success":4,"data":5,"meta":103},true,{"cveId":6,"title":7,"description":8,"shortDescription":9,"publishedDate":10,"lastModified":11,"cvssScore":12,"cvssVector":13,"cvssMetrics":14,"epssScore":40,"epssPercentile":26,"epssTimeSeries":41,"severity":42,"affectedProducts":43,"affectedProductsCount":49,"references":50,"referencesCount":59,"weaknesses":60,"weaknessesCount":49,"isActivelyExploited":64,"cisaInfo":26,"otxData":26,"relatedBlogPosts":65,"seoMetadata":66,"configurations":91,"relatedVendorCves":101,"notableEvents":102},"CVE-2020-28923","What is CVE-2020-28923?","An issue was discovered in Play Framework 2.8.0 through 2.8.4. Carefully crafted JSON payloads sent as a form field lead to Data Amplification. This affects users migrating from a Play version prior to 2.8.0 that used the Play Java API to serialize classes with protected or private fields to JSON.","An issue was discovered in Play Framework 2.8.0 through 2.8.4. Carefully crafted JSON payloads sent as a form field lead to Data Amplification. This affects ...","2020-12-03T17:15:13.287","2020-12-07T18:45:09.4",2.7,"CVSS:3.1\u002FAV:N\u002FAC:L\u002FPR:H\u002FUI:N\u002FS:U\u002FC:L\u002FI:N\u002FA:N",{"CVSSMetricV31":15,"CVSSMetricV30":26,"CVSSMetricV2":29,"CVSSMetricV40":26},[16],{"Source":17,"Type":18,"CVSSData":19,"ExploitabilityScore":27,"ImpactScore":28},"nvd@nist.gov","Primary",{"Version":20,"VectorString":13,"AttackVector":21,"AttackComplexity":22,"PrivilegesRequired":23,"UserInteraction":24,"Scope":25,"ConfidentialityImpact":22,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":12,"BaseSeverity":22,"ExploitCodeMaturity":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"TemporalSeverity":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":24,"ModifiedAttackVector":26,"ModifiedAttackComplexity":26,"ModifiedPrivilegesRequired":26,"ModifiedUserInteraction":26,"ModifiedScope":26,"ModifiedConfidentialityImpact":26,"ModifiedIntegrityImpact":26,"ModifiedAvailabilityImpact":26,"EnvironmentalScore":26,"EnvironmentalSeverity":26},"3.1","NETWORK","LOW","HIGH","NONE","UNCHANGED",null,1.2,1.4,[30],{"Source":17,"Type":18,"CVSSData":31,"BaseSeverity":37,"ExploitabilityScore":38,"ImpactScore":39,"ACInsufInfo":26,"ObtainAllPrivilege":26,"ObtainUserPrivilege":26,"ObtainOtherPrivilege":26,"UserInteractionRequired":26},{"Version":32,"VectorString":33,"AccessVector":21,"AccessComplexity":22,"Authentication":34,"ConfidentialityImpact":35,"IntegrityImpact":24,"AvailabilityImpact":24,"BaseScore":36,"BaseSeverity":26,"Exploitability":26,"RemediationLevel":26,"ReportConfidence":26,"TemporalScore":26,"CollateralDamagePotential":26,"TargetDistribution":26,"ConfidentialityRequirement":26,"IntegrityRequirement":26,"AvailabilityRequirement":26,"EnvironmentalScore":26},"2.0","AV:N\u002FAC:L\u002FAu:S\u002FC:P\u002FI:N\u002FA:N","SINGLE","PARTIAL",4,"MEDIUM",8,2.9,0.00969,[40,40,40,40,40,40,40],"Low",[44],{"vendor":45,"product":46,"version":47,"criteria":48,"vulnerable":4},"lightbend","play_framework","*","cpe:2.3:a:lightbend:play_framework:*:*:*:*:*:*:*:*",1,[51,56],{"url":52,"source":53,"tags":54},"https:\u002F\u002Fwww.playframework.com\u002Fsecurity\u002Fvulnerability","Playframework",[55],"Vendor Advisory",{"url":57,"source":53,"tags":58},"https:\u002F\u002Fwww.playframework.com\u002Fsecurity\u002Fvulnerability\u002FCVE-2020-28923-ImproperRemovalofSensitiveInformationBeforeStorageorTransfer",[55],2,[61],{"id":62,"name":62,"description":63},"Unknown","NVD-CWE-Other",false,[],{"title":67,"metaDescription":68,"keywords":69,"canonicalUrl":70,"structuredData":71},"What is CVE-2020-28923? Vulnerability Analysis | Security Advisory | Precursor Intelligence","Comprehensive analysis of CVE-2020-28923, a low severity cyber security vulnerability from 2020. An issue was discovered in Play Framework 2.8.0 through 2.8....","CVE-2020-28923, CVE-2020-28923 vulnerability, CVE-2020-28923 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research, vulnerability assessment, cyber threats, 2020, CVSS score, exploit, patch, remediation, lightbend security, play_framework vulnerability","\u002Fwhat-is\u002Fcve-2020-28923",{"@context":72,"@type":73,"headline":67,"description":68,"datePublished":10,"dateModified":11,"author":74,"publisher":78,"about":82,"mainEntityOfPage":86,"articleSection":89,"keywords":90},"https:\u002F\u002Fschema.org","TechArticle",{"@type":75,"name":76,"url":77},"Organization","Precursor Intelligence","https:\u002F\u002Fprecursorintelligence.com",{"@type":75,"name":76,"url":77,"logo":79},{"@type":80,"url":81},"ImageObject","https:\u002F\u002Fprecursorintelligence.com\u002Fimg\u002Flogos\u002Feplogo.png",{"@type":83,"name":6,"description":84,"additionalType":85},"Thing","Cybersecurity Vulnerability","https:\u002F\u002Fschema.org\u002FSoftwareBug",{"@type":87,"@id":88},"WebPage","https:\u002F\u002Fprecursorintelligence.com\u002Fwhat-is\u002Fcve-2020-28923","Cybersecurity","CVE-2020-28923, CVE-2020-28923 vulnerability, CVE-2020-28923 security, low severity vulnerability, cybersecurity, vulnerability analysis, security advisory, CVE database, threat intelligence, security research",[92],{"Operator":26,"Negate":26,"Nodes":93},[94],{"Operator":95,"Negate":26,"CPEMatch":96},"OR",[97],{"Vulnerable":4,"Criteria":48,"MatchCriteriaID":98,"VersionStartExcluding":26,"VersionStartIncluding":99,"VersionEndExcluding":26,"VersionEndIncluding":100},"1691C11B-FC50-420B-AC6A-6B91765EF34D","2.8.0","2.8.4",[],[],{"lastModified":11,"cacheTime":104,"version":32},1792356203312,{"score":106,"band":107,"action":108,"scoredAt":109},13,"Info","Track","2026-10-16T06:49:57.972769+00:00"]