CVE-2020-12480 - Play Framework (Global CSRF Bypass)

by Kevin Joensen on 10 Feb 2020

Global CSRF bypass due to RFC incompliance in HTTP header