LavaLite 路径遍历漏洞

LavaLite is an open source lightweight content management system CMS. A path traversal vulnerability exists in LavaLite version 9.0.0, which stems from the vulnerability of its SRF-TOKEN cookie to path traversal attacks, allowing read access to arbitrary files on the server...