Description
The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users' sessions via invalid input data containing a < (less than) character.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | net.liftweb:lift-webkit | all versions | — | GHSA-jf9v-fxfq-wm76 |
| Maven | net.liftweb:lift-webkit_2.7.7 | all versions | — | GHSA-jf9v-fxfq-wm76 |
| Maven | net.liftweb:lift-webkit_2.8.0 | all versions | — | GHSA-jf9v-fxfq-wm76 |
| Maven | net.liftweb:lift-webkit_2.8.1 | all versions | — | GHSA-jf9v-fxfq-wm76 |
| Maven | net.liftweb:lift-webkit_2.8.2 | all versions | — | GHSA-jf9v-fxfq-wm76 |
| Maven | net.liftweb:lift-webkit_2.9.0 | all versions | — | GHSA-jf9v-fxfq-wm76 |
| Maven | net.liftweb:lift-webkit_2.9.0-1 | all versions | — | GHSA-jf9v-fxfq-wm76 |
| Maven | net.liftweb:lift-webkit_2.9.1 | < 2.5 | 2.5 | GHSA-jf9v-fxfq-wm76 |