Skip to content

Commit aa15b5c

Browse files
committed
Added CVE-2020-12480 to list of vulnerabilities
1 parent 88fbc3d commit aa15b5c

1 file changed

Lines changed: 14 additions & 0 deletions

File tree

app/views/vulnerabilities.scala.html

Lines changed: 14 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -25,6 +25,20 @@ <h2>Reporting vulnerabilities</h2>
2525
All security bugs in Play should be reported by email to <a href="mailto:security@@playframework.com">security@@playframework.com</a>. This list is delivered to a subset of the core team who handle security issues.
2626
</p>
2727

28+
<h2>Play 2.8.x<h2>
29+
30+
<h3>Fixed in Play 2.8.2</h3>
31+
<ul>
32+
<a href="@routes.Security.vulnerability("CVE-2020-12480-CsrfBlacklistBypass")">CVE-2020-12480-CsrfBlacklistBypass</a> - Play CSRF Filter Content-Type black list bypass
33+
</ul>
34+
35+
<h2>Play 2.7.x<h2>
36+
37+
<h3>Fixed in Play 2.7.5</h3>
38+
<ul>
39+
<a href="@routes.Security.vulnerability("CVE-2020-12480-CsrfBlacklistBypass")">CVE-2020-12480-CsrfBlacklistBypass</a> - Play CSRF Filter Content-Type black list bypass
40+
</ul>
41+
2842
<h2>Play 2.6.x<h2>
2943

3044
<h3>Fixed in Play 2.6.24</h3>

0 commit comments

Comments
 (0)