CVE-2023-27238

CVE-2023-27238

CVSS 9.8 CRITICALEPSS 0.9%CWE-444

LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning.

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Produtos afetados

Quer saber se a sua infraestrutura está exposta a isto?

Falar com a TrueHacking →

Referências

https://github.com/LavaLite/cms/blob/c0a36dd748c8f7ff53eb16eb572bdeebe72eb420/app/Http/Controllers/ResourceController.php#L8 https://github.com/M19O/Security-Advisories/tree/main/CVE-2023-27238