Package · Maven

net.liftweb:lift-webkit_2.7.7

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium —

CVE-2013-3300

Lift Sensitive Information Disclosure

The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users' sessions via invalid input data containing a < (…

net.liftweb:lift-webkit_2.9.0-1 net.liftweb:lift-webkit_2.7.7 net.liftweb:lift-webkit_2.8.1 net.liftweb:lift-webkit_2.9.0 Maven

Jul 26, 2013