TI-2020-12145 CVE-2020-15400 · GHSA-j33j-fg2g-mcv2
CakePHP before 4.0.6 mishandles CSRF token generation.
Priority LOW 20
CakePHP before 4.0.6 mishandles CSRF token generation.
Vulnerabilities
3 records
TI-2012-03742 CVE-2012-4399 · GHSA-5964-pq8r-4q62
The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote…
Priority MEDIUM 47
The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote attackers to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack.
TI-2010-04068 CVE-2010-4335 · GHSA-g2vx-8v47-4vhh
The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x…
Priority HIGH 66
The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted data[_Toke…