What’s Vulnerable › Vulnerabilities

CVE-2023-27238

• Severity: critical (CVSS 9.8 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.9% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2023-05-12 · updated 2026-06-17
• Weakness: CWE-444

Description

LavaLite CMS v 9.0.0 was discovered to be vulnerable to web cache poisoning.

Affected products

• LavaLite CMS: 9.0.0

References

• https://github.com/LavaLite/cms/blob/c0a36dd748c8f7ff53eb16eb572bdeebe72eb420/app/Http/Controllers/ResourceController.php#L8
• https://github.com/M19O/Security-Advisories/tree/main/CVE-2023-27238
• https://github.com/LavaLite/cms/blob/c0a36dd748c8f7ff53eb16eb572bdeebe72eb420/app/Http/Controllers/ResourceController.php#L8
• https://github.com/M19O/Security-Advisories/tree/main/CVE-2023-27238

Get alerted when CVE-2023-27238 or the next vulnerability affects your stack