~ / search / GHSA-94q4-v5g6-qp7x

GHSA-94q4-v5g6-qp7x

LavaLite CMS vulnerable to host header injection attack

Source: GitHub Advisory Database (reviewed) Moderate CVE-2023-27237

Packages

EcosystemPackageAffectedFixed in
Packagist lavalite/cms <= 9.0.0 no fix listed

Details

As written in the advisory (Markdown source, shown as plain text).

LavaLite CMS v 9.0.0 was discovered to be vulnerable to a host header injection attack.

References

External links from the advisory. They lead to third-party sites.