CVE-2013-3300

The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users' sessions via invalid input data containing a less than character...

net.liftweb:lift-couchdb_2.8.1 (2.2-rc6), net.liftweb:lift-facebook_2.8.1 (2.2-rc6) +15 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.8.1 (2.2-rc6)

net.liftweb:lift-webkit2.8.1 MAVEN version 2.2-rc6 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit2.8.1 and may be impacted: - net.liftweb:lift-couchdb2.8.1 2.2-rc6 - net.liftweb:lift-facebook2.8.1 2.2-rc6 -...

net.liftweb:lift-couchdb_2.8.0 (2.3-rc1), net.liftweb:lift-facebook_2.8.0 (2.3-rc1) +15 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.8.0 (2.3-rc1)

net.liftweb:lift-webkit2.8.0 MAVEN version 2.3-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit2.8.0 and may be impacted: - net.liftweb:lift-couchdb2.8.0 2.3-rc1 - net.liftweb:lift-facebook2.8.0 2.3-rc1 -...

net.liftweb:lift-couchdb_2.8.0 (2.4-m3), net.liftweb:lift-facebook_2.8.0 (2.4-m3) +15 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.8.0 (2.4-m3)

net.liftweb:lift-webkit2.8.0 MAVEN version 2.4-m3 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit2.8.0 and may be impacted: - net.liftweb:lift-couchdb2.8.0 2.4-m3 - net.liftweb:lift-facebook2.8.0 2.4-m3 - net.liftweb:lift-jpa2.8...

com.foursquare:rogue_2.8.0 (>=1.0.7, <=1.0.19), net.liftweb:lift-couchdb_2.8.0 (2.4) +16 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.8.0 (2.4)

net.liftweb:lift-webkit2.8.0 MAVEN version 2.4 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit2.8.0 and may be impacted: - com.foursquare:rogue2.8.0 =1.0.7, =1.0.19 - net.liftweb:lift-couchdb2.8.0 2.4 -...

com.foursquare:rogue_2.8.0 (>=1.0.1, <=1.0.6), net.liftweb:lift-couchdb_2.8.0 (2.2) +16 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.8.0 (2.2)

net.liftweb:lift-webkit2.8.0 MAVEN version 2.2 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit2.8.0 and may be impacted: - com.foursquare:rogue2.8.0 =1.0.1, =1.0.6 - net.liftweb:lift-couchdb2.8.0 2.2 -...

net.liftweb:lift-couchdb (2.0-rc1), net.liftweb:lift-facebook (2.0-rc1) +13 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit (2.0-rc1)

net.liftweb:lift-webkit MAVEN version 2.0-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit and may be impacted: - net.liftweb:lift-couchdb 2.0-rc1 - net.liftweb:lift-facebook 2.0-rc1 - net.liftweb:lift-jpa 2.0-rc1 -...

net.liftweb:lift-couchdb_2.7.7 (2.1-m1), net.liftweb:lift-facebook_2.7.7 (2.1-m1) +13 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.7.7 (2.1-m1)

net.liftweb:lift-webkit2.7.7 MAVEN version 2.1-m1 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit2.7.7 and may be impacted: - net.liftweb:lift-couchdb2.7.7 2.1-m1 - net.liftweb:lift-facebook2.7.7 2.1-m1 - net.liftweb:lift-jpa2.7...

net.liftweb:lift-couchdb_2.7.7 (2.2-rc1), net.liftweb:lift-facebook_2.7.7 (2.2-rc1) +14 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.7.7 (2.2-rc1)

net.liftweb:lift-webkit2.7.7 MAVEN version 2.2-rc1 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit2.7.7 and may be impacted: - net.liftweb:lift-couchdb2.7.7 2.2-rc1 - net.liftweb:lift-facebook2.7.7 2.2-rc1 -...

net.liftweb:lift-couchdb_2.7.7 (2.2-rc6), net.liftweb:lift-facebook_2.7.7 (2.2-rc6) +14 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.7.7 (2.2-rc6)

net.liftweb:lift-webkit2.7.7 MAVEN version 2.2-rc6 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit2.7.7 and may be impacted: - net.liftweb:lift-couchdb2.7.7 2.2-rc6 - net.liftweb:lift-facebook2.7.7 2.2-rc6 -...

net.liftweb:lift-couchdb_2.7.7 (2.2), net.liftweb:lift-facebook_2.7.7 (2.2) +14 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.7.7 (2.2)

net.liftweb:lift-webkit2.7.7 MAVEN version 2.2 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit2.7.7 and may be impacted: - net.liftweb:lift-couchdb2.7.7 2.2 - net.liftweb:lift-facebook2.7.7 2.2 - net.liftweb:lift-jpa2.7.7 2.2 -...

net.liftweb:lift-couchdb_2.8.0 (2.2-rc6), net.liftweb:lift-facebook_2.8.0 (2.2-rc6) +15 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.8.0 (2.2-rc6)

net.liftweb:lift-webkit2.8.0 MAVEN version 2.2-rc6 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit2.8.0 and may be impacted: - net.liftweb:lift-couchdb2.8.0 2.2-rc6 - net.liftweb:lift-facebook2.8.0 2.2-rc6 -...

com.foursquare:rogue_2.8.0 (>=1.0.20, <=1.1.8), net.liftweb:lift-facebook_2.8.0 (2.4-m2) +15 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.8.0 (2.4-m2)

net.liftweb:lift-webkit2.8.0 MAVEN version 2.4-m2 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit2.8.0 and may be impacted: - com.foursquare:rogue2.8.0 =1.0.20, =1.1.8 - net.liftweb:lift-facebook2.8.0 2.4-m2 -...

net.liftweb:lift-couchdb_2.8.1 (2.2-rc2), net.liftweb:lift-facebook_2.8.1 (2.2-rc2) +15 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.8.1 (2.2-rc2)

net.liftweb:lift-webkit2.8.1 MAVEN version 2.2-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit2.8.1 and may be impacted: - net.liftweb:lift-couchdb2.8.1 2.2-rc2 - net.liftweb:lift-facebook2.8.1 2.2-rc2 -...

net.liftweb:lift-couchdb_2.8.1 (2.3-rc2), net.liftweb:lift-facebook_2.8.1 (2.3-rc2) +15 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.8.1 (2.3-rc2)

net.liftweb:lift-webkit2.8.1 MAVEN version 2.3-rc2 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit2.8.1 and may be impacted: - net.liftweb:lift-couchdb2.8.1 2.3-rc2 - net.liftweb:lift-facebook2.8.1 2.3-rc2 -...

net.liftweb:lift-couchdb_2.8.1 (2.3-rc5), net.liftweb:lift-facebook_2.8.1 (2.3-rc5) +15 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.8.1 (2.3-rc5)

net.liftweb:lift-webkit2.8.1 MAVEN version 2.3-rc5 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit2.8.1 and may be impacted: - net.liftweb:lift-couchdb2.8.1 2.3-rc5 - net.liftweb:lift-facebook2.8.1 2.3-rc5 -...

com.fmpwizard:lift-named-comet_2.9.1 (0.3), com.foursquare:rogue-lift_2.9.1 (>=2.0.0-beta1, <=3.0.0-beta15) +73 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit_2.9.1 (>=2.4-m4, <=2.5-rc6)

net.liftweb:lift-webkit2.9.1 MAVEN version =2.4-m4, =2.0.0-beta1, =2.0.0-beta22, =1.0.24, =1.8.3.2, =2.5, =2.5, =0.0.3, =0.0.3, =1.2, =2.5-m1-1.1, =2.5-m4-1.0.2, =2.5-rc4-1.0.2 - net.liftmodules:extras2.52.9.1 0.1 - net.liftmodules:facebook2.52.9.1 1.2 and more Source cves: CVE-2013-3300 Source...

net.liftweb:lift-core (0.9), net.liftweb:lift-example (0.9) +7 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit (0.9)

net.liftweb:lift-webkit MAVEN version 0.9 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit and may be impacted: - net.liftweb:lift-core 0.9 - net.liftweb:lift-example 0.9 - net.liftweb:lift-examples-parent 0.9 -...

net.liftweb:http-authentication (1.0.1), net.liftweb:jpademo-master (1.0.1) +15 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit (1.0.1)

net.liftweb:lift-webkit MAVEN version 1.0.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit and may be impacted: - net.liftweb:http-authentication 1.0.1 - net.liftweb:jpademo-master 1.0.1 - net.liftweb:jpademo-spa 1.0.1 -...

net.liftweb:http-authentication (1.1-m1), net.liftweb:jpademo-master (1.1-m1) +16 more potentially affected by CVE-2013-3300 via net.liftweb:lift-webkit (1.1-m1)

net.liftweb:lift-webkit MAVEN version 1.1-m1 is affected by a known vulnerability. The following packages have a transitive dependency on net.liftweb:lift-webkit and may be impacted: - net.liftweb:http-authentication 1.1-m1 - net.liftweb:jpademo-master 1.1-m1 - net.liftweb:jpademo-spa 1.1-m1 -...