GHSA-6vcf-cfjp-qxcw

Source

https://github.com/advisories/GHSA-6vcf-cfjp-qxcw

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/05/GHSA-6vcf-cfjp-qxcw/GHSA-6vcf-cfjp-qxcw.json

Aliases

• CVE-2023-27238

Published

2023-05-12T12:30:18Z

Modified

2024-02-16T08:16:28.894025Z

Details

LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning.

References

• https://nvd.nist.gov/vuln/detail/CVE-2023-27238
• https://github.com/LavaLite/cms
• https://github.com/LavaLite/cms/blob/c0a36dd748c8f7ff53eb16eb572bdeebe72eb420/app/Http/Controllers/ResourceController.php#L8
• https://github.com/M19O/Security-Advisories/tree/main/CVE-2023-27238