Lucene search
GoogleOSV:GHSA-JF9V-FXFQ-WM76HistoryMay 17, 2022 - 5:07 a.m.
Lift Sensitive Information Disclosure
2022-05-1705:07:19
Google
osv.dev
5
lift
jsonparser
sensitive information
EPSS
0.001
Percentile
49.9%
The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users’ sessions via invalid input data containing a < (less than) character.
Related
cvelist
cvelist
CVE-2013-3300
2013-07-26 17:00:00
cve
cve
CVE-2013-3300
2013-07-29 13:59:05
nvd
nvd
CVE-2013-3300
2013-07-29 13:59:05
github
github
Lift Sensitive Information Disclosure
2022-05-17 05:07:19
prion
prion
Authentication flaw
2013-07-29 13:59:00