← Back

Liftweb

liftweb

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Lift
lift
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2013-3300
1Liftweb
1Lift
Apr 29, 2026
Jul 29, 2013
N/A· v4
N/A· v3
4.0 MEDIUM· v2
The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users' sessions...Show more
The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users' sessions via invalid input data containing a < (less than) character.Show less