In Play Framework 2.6.0 through 2.8.2, data amplification can occur when an application accepts multipart/form-data JSON input.
Weakness
The product does not properly control the amount of recursion that takes place, consuming excessive resources, such as allocated memory or the program stack.
Affected Software
| Name | Vendor | Start Version | End Version |
|---|---|---|---|
| Play_framework | Lightbend | * | 2.6.25 (including) |
| Play_framework | Lightbend | 2.7.0 (including) | 2.7.5 (including) |
| Play_framework | Lightbend | 2.8.0 (including) | 2.8.2 (including) |