MEDIUM6.1

GHSA-94q4-v5g6-qp7x

LavaLite CMS vulnerable to host header injection attack

Details

LavaLite CMS v 9.0.0 was discovered to be vulnerable to a host header injection attack.

Are you affected?

Enter the version of the package you're using.

Affected packages

Packagist/lavalite/cms

Introduced in: 0

No fixed version published yet for lavalite/cms (composer). Pin to a known-safe version or switch to an alternative.

References

https://nvd.nist.gov/vuln/detail/CVE-2023-27237[ADVISORY]
https://github.com/LavaLite/cms[PACKAGE]
https://github.com/M19O/Security-Advisories/tree/main/CVE-2023-27237[WEB]
https://i.ibb.co/34DSW7B/1.png[WEB]
https://i.ibb.co/kSkqPhQ/3.png[WEB]
https://i.ibb.co/mJq9CH8/2.png[WEB]
http://lavalite.com[WEB]