Read the docs

Liftweb

Records1All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high0CVSS 7.0–8.9

Exploited now

Liftweb records in CISA KEV

No Liftweb vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Records

1 record

Priority LOW 22

The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users' sessions…

CVSS 2.0MEDIUM 4.0 Network Low privileges Interaction — EPSS 0.01477 Published 2013-07-26 Fixed in 2.5 CWE-119
Open these records in search →