Packagist/cakephp/cakephp CVE-2006-4067: medium 6.5, EPSS 1.21%
Cross-site scripting (XSS) vulnerability in CakePHP
Action: Upgrade cakephp/cakephp to 1.1.7.3363 or later.
composer require cakephp/cakephp:1.1.7.3363Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.0.1.2708 | 1.1.7.3363 | - |
Fixed versions
| 1.1.7.3363 |
Sources
- osv: GHSA-vc29-mvwv-wpcq
- https://nvd.nist.gov/vuln/detail/CVE-2006-4067
- https://exchange.xforce.ibmcloud.com/vulnerabilities/28256
- https://github.com/cakephp/cakephp
CVE-2006-4067 · published · modified · JSON