Description
LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Packagist | lavalite/cms | <= 9.0.0 | — | GHSA-6vcf-cfjp-qxcw |
Critical · 9.8
CVE-2023-27238
EUVD-2023-1489GHSA-6vcf-cfjp-qxcw
LavaLite vulnerable to web cache poisoning
Published May 12, 2023 · Updated Jan 27, 2025 · Assigned by mitre