CVE-2011-3712
1 advisory.
Packagist/cakephp/cakephp CVE-2011-3712: medium, EPSS 1.58%
CakePHP 1.3.7 allows remote attackers to obtain sensitive information via a direct request to a .php file
Action: Upgrade cakephp/cakephp to 1.3.8 or later.
composer require cakephp/cakephp:1.3.8Affected
| introduced | fixed | last affected |
|---|---|---|
| 1.3.7 | 1.3.8 | - |
Fixed versions
| 1.3.8 |
Sources
- osv: GHSA-r7p6-fr3x-r877
- https://nvd.nist.gov/vuln/detail/CVE-2011-3712
- https://github.com/cakephp/cakephp
- http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/%21_README
- http://code.google.com/p/inspathx/source/browse/trunk/paths_vuln/cakephp-1.3.7
- http://www.openwall.com/lists/oss-security/2011/06/27/6
CVE-2011-3712 · published · modified · JSON