CVE-2020-15400
1 advisory.
Packagist/cakephp/cakephp CVE-2020-15400: medium 4.3, EPSS 0.45%
Cross-Site Request Forgery in CakePHP
Action: Upgrade cakephp/cakephp to 3.10.3 or later.
composer require cakephp/cakephp:4.0.6composer require cakephp/cakephp:3.10.3Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.0.0 | 4.0.6 | - |
| 0 | 3.10.3 | - |
Fixed versions
| 4.0.6 | 3.10.3 |
Sources
- osv: GHSA-j33j-fg2g-mcv2
- https://nvd.nist.gov/vuln/detail/CVE-2020-15400
- https://bakery.cakephp.org/2020/04/18/cakephp_406_released.html
- https://bakery.cakephp.org/2022/05/08/cakephp_3103_released.html
CVE-2020-15400 · published · modified · JSON