4

CVE-2013-3300

Exploit
The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users' sessions via invalid input data containing a < (less than) character.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Liftweb ≫ Lift Updaterc6 Version <= 2.5
Liftweb ≫ Lift Version2.1
Liftweb ≫ Lift Version2.2
Liftweb ≫ Lift Version2.3
Liftweb ≫ Lift Version2.4
Liftweb ≫ Lift Version2.5 Updatem4
Liftweb ≫ Lift Version2.5 Updaterc1
Liftweb ≫ Lift Version2.5 Updaterc2
Liftweb ≫ Lift Version2.5 Updaterc3
Liftweb ≫ Lift Version2.5 Updaterc4
Liftweb ≫ Lift Version2.5 Updaterc5
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 1.48% 0.705
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 4 8 2.9
AV:N/AC:L/Au:S/C:P/I:N/A:N
CWE-119 Improper Restriction of Operations within the Bounds of a Memory Buffer

The product performs operations on a memory buffer, but it reads from or writes to a memory location outside the buffer's intended boundary. This may result in read or write operations on unexpected memory locations that could be linked to other variables, data structures, or internal program data.

http://blog.addepar.com/2013/07/an-atypical-web-vulnerability.html
Exploit
https://github.com/lift/framework/commit/099d9c86cf6d81f4953957add478ab699946e601
Patch
Exploit