Most recent entries from all https://db.gcve.eu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 10 Nov 2026 19:11:42 +0000 fkie_cve-2013-3300 https://db.gcve.eu/vuln/fkie_cve-2013-3300 <p>The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users&#39; sessions via invalid input data containing a &lt; (less than) character.</p> <p>The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users&#39; sessions via invalid input data containing a &lt; (less than) character.</p> https://db.gcve.eu/vuln/fkie_cve-2013-3300 GHSA-jf9v-fxfq-wm76 — Lift Sensitive Information Disclosure https://db.gcve.eu/vuln/ghsa-jf9v-fxfq-wm76 <p><strong>Affected:</strong> Maven: net.liftweb:lift-webkit, Maven: net.liftweb:lift-webkit_2.7.7, Maven: net.liftweb:lift-webkit_2.8.0, Maven: net.liftweb:lift-webkit_2.8.1, Maven: net.liftweb:lift-webkit_2.8.2, Maven: net.liftweb:lift-webkit_2.9.0, Maven: net.liftweb:lift-webkit_2.9.0-1, Maven: net.liftweb:lift-webkit_2.9.1</p> <p>The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users&#39; sessions via invalid input data containing a &lt; (less than) character.</p> <p><strong>Affected:</strong> Maven: net.liftweb:lift-webkit, Maven: net.liftweb:lift-webkit_2.7.7, Maven: net.liftweb:lift-webkit_2.8.0, Maven: net.liftweb:lift-webkit_2.8.1, Maven: net.liftweb:lift-webkit_2.8.2, Maven: net.liftweb:lift-webkit_2.9.0, Maven: net.liftweb:lift-webkit_2.9.0-1, Maven: net.liftweb:lift-webkit_2.9.1</p> <p>The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users&#39; sessions via invalid input data containing a &lt; (less than) character.</p> https://db.gcve.eu/vuln/ghsa-jf9v-fxfq-wm76 gsd-2013-3300 https://db.gcve.eu/vuln/gsd-2013-3300 gsd-2013-3300 https://db.gcve.eu/vuln/gsd-2013-3300