CVE-2019-11458
1 advisory.
Packagist/cakephp/cakephp CVE-2019-11458: high 7.5, EPSS 2.00%
Unsafe deserialization in SmtpTransport in CakePHP
Action: Upgrade cakephp/cakephp to 3.5.18 or later.
composer require cakephp/cakephp:3.5.18composer require cakephp/cakephp:3.6.15composer require cakephp/cakephp:3.7.7Affected
| introduced | fixed | last affected |
|---|---|---|
| 3.0.0 | 3.5.18 | - |
| 3.6.0 | 3.6.15 | - |
| 3.7.0 | 3.7.7 | - |
Fixed versions
| 3.5.18 | 3.6.15 | 3.7.7 |
Sources
- osv: GHSA-qhrx-hcm6-pmrw
- https://nvd.nist.gov/vuln/detail/CVE-2019-11458
- https://github.com/cakephp/cakephp/commit/1a74e798309192a9895c9cedabd714ceee345f4e
- https://github.com/cakephp/cakephp/commit/81412fbe2cb88a304dbeeece1955bc0aec98edb1
- https://github.com/cakephp/cakephp/commit/c25b91bf7c72db43c01b47a634fd02112ff9f1cd
- https://bakery.cakephp.org/2019/04/23/cakephp_377_3615_3518_released.html
- https://github.com/FriendsOfPHP/security-advisories/blob/master/cakephp/cakephp/CVE-2019-11458.yaml
- https://github.com/cakephp/cakephp
- https://github.com/cakephp/cakephp/commits/master
- https://github.com/cakephp/cakephp/compare/3.7.6...3.7.7
- https://github.com/cakephp/cakephp/releases
CVE-2019-11458 · published · modified · JSON