Sensitive Data Exposure in LavaLite CMS Affects Version 9.0.0
CVE-2023-36983

7.5HIGH

Key Information:

Vendor

Lavalite

Status
Lavalite
Vendor
CVE Published:
1 August 2023

What is CVE-2023-36983?

LavaLite CMS version 9.0.0 is identified as having a vulnerability that allows for sensitive data exposure, potentially leading to unauthorized access to personally identifiable information. This flaw can be exploited if an attacker can intercept or manipulate requests, thereby exposing confidential user data. It's crucial for users of this CMS version to take immediate action by applying security patches or upgrading to a more secure version to protect their data from potential breaches.

References

https://github.com/LavaLite/cms
https://github.com/M19O/Security-Advisories/tree/main/CVE...

CVSS V3.1

Score:
7.5
Severity:
HIGH
Confidentiality:
High
Integrity:
None
Availability:
High
Attack Vector:
Network
Attack Complexity:
Low
Privileges Required:
None
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.