Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
The JsonParser class in json/JsonParser.scala in Lift before 2.5 interprets a certain end-index value as a length value, which allows remote authenticated users to obtain sensitive information from other users' sessions via invalid input data containing a < (less than) character.
CVSS Information
N/A
Vulnerability Type
N/A
Vulnerability Title
Lift JsonParser类缓冲区溢出漏洞
Vulnerability Description
Lift是Lift团队开发的一个基于Scala编程语言的Web框架，使用Apache 2.0 license许可发布。该框架支持开发者创建实时交互应用，并具有高性能和可扩展的特点。 Lift 2.5:rc6及之前的版本中的json/JsonParser.scala文件中的JsonParser类中存在安全漏洞，该漏洞源于解释最终索引值为长度值。远程经过授权的攻击者可通过发送包含‘<’（小于）字符有效的输入数据到解析器，利用该漏洞获得其他用户会话的敏感信息。
CVSS Information
N/A
Vulnerability Type
N/A