https://db.gcve.eu/rss/recent/all/10 Most recent entries from all 2026-11-10T19:11:42.194520+00:00 Vulnerability-Lookup info@gcve.eu python-feedgen Contains only the most 10 recent entries. https://db.gcve.eu/vuln/fkie_cve-2013-3300 fkie_cve-2013-3300 2026-11-10T19:11:42.197512+00:00

The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users' sessions via invalid input data containing a < (less than) character.

 https://db.gcve.eu/vuln/ghsa-jf9v-fxfq-wm76 GHSA-jf9v-fxfq-wm76 — Lift Sensitive Information Disclosure 2026-11-10T19:11:42.197589+00:00

Affected: Maven: net.liftweb:lift-webkit, Maven: net.liftweb:lift-webkit_2.7.7, Maven: net.liftweb:lift-webkit_2.8.0, Maven: net.liftweb:lift-webkit_2.8.1, Maven: net.liftweb:lift-webkit_2.8.2, Maven: net.liftweb:lift-webkit_2.9.0, Maven: net.liftweb:lift-webkit_2.9.0-1, Maven: net.liftweb:lift-webkit_2.9.1

The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users' sessions via invalid input data containing a < (less than) character.

 https://db.gcve.eu/vuln/gsd-2013-3300 gsd-2013-3300 2026-11-10T19:11:42.197632+00:00 gsd-2013-3300