cakephp vulnerabilities

Products

• cakephp/cakephp 29
• cakephp/database 3
• cakephp/authentication 2
• twig-view 2
• cakephp/database 1
• cakephp/debug_kit 1
• cakephp/queue 1

Latest cakephp CVEs

Newest publication first · page 2 of 2

1. CVE-2020-15400 Cross-Site Request Forgery in CakePHP

   Published 2020-06-30

   Medium·CVSS 4.3 EPSS 0.54%

   CakePHP before 4.0.6 mishandles CSRF token generation. This might be remotely exploitable in conjunction with XSS.

2. CVE-2019-11458 Unsafe deserialization in SmtpTransport in CakePHP

   Published 2019-05-08

   High·CVSS 7.5 EPSS 2.0% PoC

   An issue was discovered in SmtpTransport in CakePHP 3.7.6. An unserialized object with modified internal properties can trigger arbitrary file overwriting upon destruction.

3. CVE-2016-4793 CakePHP allows remote attackers to spoof their IP

   Published 2017-01-23

   High·CVSS 7.5 EPSS 5.1% Public exploit

   The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header.

4. CVE-2015-8379 CakePHP might allow remote attackers to bypass CSRF protection mechanism via the _method parameter

   Published 2016-01-26

   High·CVSS 8.8 EPSS 1.5% Public exploit

   CakePHP 2.x and 3.x before 3.1.5 might allow remote attackers to bypass the CSRF protection mechanism via the _method parameter.

5. CVE-2012-4399 CakePHPallows remote attackers to read arbitrary files via XML data containing external entity references

   Published 2012-10-09

   High·CVSS 7.5 EPSS 12.1% Public exploit

   The Xml class in CakePHP 2.1.x before 2.1.5 and 2.2.x before 2.2.1 allows remote attackers to read arbitrary files via XML data containing external entity references, aka an XML external entity (XXE) injection attack.

6. CVE-2011-3712 CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file

   Published 2011-09-23

   Medium·CVSS 5.0 EPSS 1.6%

   CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file, which reveals the installation path in an error message, as demonstrated by dispatcher.php and certain other files.

7. CVE-2010-4335 CakePHP allows remote attackers to modify internal Cake cache and execute arbitrary code

   Published 2011-01-14

   High·CVSS 7.5 EPSS 55.2% Framework module Public exploit

   The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted data[_Token][fields] value that is processed by the unserialize functi...

8. CVE-2006-5031 CakePHP directory traversal vulnerability allows remote attackers to read arbitrary files

   Published 2006-09-27

   Medium·CVSS 5.0 EPSS 7.7%

   Directory traversal vulnerability in app/webroot/js/vendors.php in Cake Software Foundation CakePHP before 1.1.8.3544 allows remote attackers to read arbitrary files via a .. (dot dot) in the file parameter, followed by a filename ending with "%00" and a .js filename.

9. CVE-2006-4067 Cross-site scripting (XSS) vulnerability in CakePHP

   Published 2006-08-10

   Medium·CVSS 4.3 EPSS 1.2%

   Cross-site scripting (XSS) vulnerability in cake/libs/error.php in CakePHP before 1.1.7.3363 allows remote attackers to inject arbitrary web script or HTML via the URL, which is reflected back in a 404 ("Not Found") error page. NOTE: some of these details are obtained from third...

Sources: CVE.org, NVD, CISA KEV, FIRST EPSS, OSV and public exploit-reference metadata. Product matching comes from the published CVE records. A proof-of-concept means public code exists; it is not evidence of exploitation.