liftweb lift 2.5 release candidate 3
Approved changes feed: RSS · Atom
cpe:2.3:a:liftweb:lift:2.5:rc3:*:*:*:*:*:*part: a version: 2.5 update: rc3
| Vendor | Liftweb (918d8b28-3b07-5687-a5ea-8aa82e052b89) |
|---|---|
| Product | Lift (9867a34a-da36-5023-bc01-aa995a73a518) |
| Edition | * |
| Language | * |
| Software edition | * |
| Target software | * |
| Target hardware | * |
| Other | * |
Notes
Imported from NVD CPE 2.0 feed
PURL mappings
| PURL | Source | Last updated |
|---|---|---|
pkg:github/lift/framework |
purl2cpe | 2026-06-01 10:12:07.761529 |
Vulnerability references
| Identifier | cpeApplicability | Submitted | db.gcve.eu details | Rationale |
|---|---|---|---|---|
CVE:CVE-2013-3300 |
vulnerable | 2026-06-08 05:04:30.842491 |
Details available
The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users' sessions via invalid input data containing a < (less than) character.
Published: 2013-07-26T17:00:00.000Z
Updated: 2024-09-17T02:52:03.039Z |
Imported from gcve-enriched-dumps CVE data |
Contribute
You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.
Inspect record JSON
Open this panel to browse, search, copy or download the JSON record.