{"action":"No fix published. Pin and monitor.","affected":[{"introduced":"0"}],"component":"net.liftweb:lift-webkit_2.9.0","cve_ids":["CVE-2013-3300"],"ecosystem":"Maven","epss":0.01477,"exploited":false,"fixed_versions":[],"ghsa_id":"GHSA-jf9v-fxfq-wm76","id":"tcs_01M5N92PZR4VY9D9PBYRJ9RA16","modified_at":"2025-09-30T19:39:30.217393Z","published_at":"2022-05-17T05:07:19Z","references":["https://osv.dev/vulnerability/GHSA-jf9v-fxfq-wm76","https://nvd.nist.gov/vuln/detail/CVE-2013-3300","https://github.com/lift/framework/commit/099d9c86cf6d81f4953957add478ab699946e601","https://github.com/lift/framework","http://blog.addepar.com/2013/07/an-atypical-web-vulnerability.html"],"severity":{"label":"medium"},"sources":[{"source":"osv","source_id":"GHSA-jf9v-fxfq-wm76#Maven/net.liftweb:lift-webkit_2.9.0","url":"https://osv.dev/vulnerability/GHSA-jf9v-fxfq-wm76"}],"summary":"Lift Sensitive Information Disclosure"}