CVE-2013-3300: Improper Restriction of Operations within the Bounds of a Memory Buffer

The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users' sessions via invalid input data containing a less than character...

PT-2013-4283

Name of the Vulnerable Software and Affected Versions Lift versions prior to 2.5 Description The issue allows remote authenticated users to obtain sensitive information from other users' sessions via invalid input data containing a character. This is due to the JsonParser class interpreting a...