GitHub Advisoryadvisory · Packagist

GHSA-6vcf-cfjp-qxcw LavaLite vulnerable to web cache poisoning

CRITICAL Published 2023-05-12 Modified 2025-01-27 Official page ↗

Aliases: CVE-2023-27238
Ecosystem: Packagist
Packages: lavalite/cms
Severity: Critical
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
Weaknesses: CWE-444
Reviewed: 2023-05-12

Affected packages

• Packagist lavalite/cms: <= 9.0.0 (no fix yet)

Description

LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning.

Related

Alias · CVE (1)

CVE-2023-27238 LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning. vulnerability

Weakness · CWE (1)

CWE-444 Inconsistent Interpretation of HTTP Requests weakness

References