Vulnerability Database

296,147

Total vulnerabilities in the database

CVE-2023-27238

LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning.

Published: May 12, 2023
Updated: May 9, 2024
CVE: CVE-2023-27238
GHSA: GHSA-6vcf-cfjp-qxcw
Severity: Critical
Exploit:

CVSS v3:

Severity: Critical
Score: 9.8
AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

No CWE or OWASP classifications available.

Affected Software
References

Software	From	Fixed in
lavalite / cms	-	9.0.0.x
lavalite / lavalite	9.0.0	9.0.0.x