CVE-2023-27237

Summary

LavaLite CMS v 9.0.0 was discovered to be vulnerable to a host header injection attack.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• http://lavalite.com
• https://i.ibb.co/34DSW7B/1.png
• https://i.ibb.co/kSkqPhQ/3.png
• https://i.ibb.co/mJq9CH8/2.png
• https://github.com/M19O/Security-Advisories/tree/main/CVE-2023-27237

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

References

• https://i.ibb.co/34DSW7B/1.png
• https://i.ibb.co/kSkqPhQ/3.png
• https://i.ibb.co/mJq9CH8/2.png
• https://github.com/M19O/Security-Advisories/tree/main/CVE-2023-27237

• ←Previous
• Next→