Packagist/cakephp/cakephp: medium
CakePHP has incorrect Cross-Site Request Forgery validation
Action: Upgrade cakephp/cakephp to 3.0.4 or later.
composer require cakephp/cakephp:3.0.4Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.0.4 | - |
Fixed versions
| 3.0.4 |
Sources
- osv: GHSA-829q-v5g8-hhxc
- https://github.com/cakephp/cakephp/commit/522ed2f1fb49b00001c1ef8815a6feda790d61dd
- https://bakery.cakephp.org/2015/05/07/cakephp_3_0_4_released.html
- https://github.com/FriendsOfPHP/security-advisories/blob/master/cakephp/cakephp/2015-05-07.yaml
- https://github.com/cakephp/cakephp
published · modified · JSON