CVE-2013-3300

The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated…

published July 26, 2013

CVSS
—
EPSS
1%
Percentile
73.7
In the wild
Unconfirmed
What it is

The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users' sessions via invalid input data containing a < (less than) character.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01477 · 73.7th percentile
Published
2013-07-26T17:00Z
EPSS history
Timeline
  • 26 JUL 17:00Z
    The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated…
    cvelistv5