CVE-2023-27238: Critical severity lavalite vulnerability
Published May 12, 2023
·Updated
LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning.
Affected Software
2 affected components
composer/lavalite/cms<=9.0.0
Lavalite LavaLite=9.0.0
Event History
May 12, 2023
CVE Published
via MITRE·12:00 AM
Data Sourced
via MITRE·12:00 AM
Description
Data Sourced
via NVD·11:15 AM
DescriptionSeverityWeaknessAffected Software
Advisory Published
12:30 PM
Frequently Asked Questions
1
What is LavaLite CMS v 9.0.0?
LavaLite CMS v 9.0.0 is a content management system.
2
What is web cache poisoning?
Web cache poisoning is a type of attack in which an attacker tricks a web server cache into serving malicious content to users.
3
How severe is CVE-2023-27238?
CVE-2023-27238 has a severity rating of critical (9.8).
4
How can I fix the vulnerability in LavaLite CMS v 9.0.0?
To fix the vulnerability in LavaLite CMS v 9.0.0, you should update to a version that has the vulnerability patched.
5
Where can I find more information about CVE-2023-27238?
You can find more information about CVE-2023-27238 on the NIST National Vulnerability Database (NVD) website.