CVE-2023-22727
2 advisories.
Packagist/cakephp/cakephp CVE-2023-22727: critical 9.8, EPSS 0.86%
CakePHP Database\\Query::offset() and limit() methods are vulnerable to SQL injection
Action: Upgrade cakephp/cakephp to 4.2.12 or later.
composer require cakephp/cakephp:4.2.12composer require cakephp/cakephp:4.3.11composer require cakephp/cakephp:4.4.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.2.0 | 4.2.12 | - |
| 4.3.0 | 4.3.11 | - |
| 4.4.0 | 4.4.10 | - |
Fixed versions
| 4.2.12 | 4.3.11 | 4.4.10 |
Sources
- osv: GHSA-6g8q-qfpv-57wp
- https://github.com/cakephp/cakephp/security/advisories/GHSA-6g8q-qfpv-57wp
- https://nvd.nist.gov/vuln/detail/CVE-2023-22727
- https://github.com/cakephp/cakephp/commit/3f463e7084b5a15e67205ced3a622577cca7a239
- https://bakery.cakephp.org/2023/01/06/cakephp_4211_4311_4410_released.html
- https://github.com/cakephp/cakephp
CVE-2023-22727 · published · modified · JSON
Packagist/cakephp/database CVE-2023-22727: critical 9.8, EPSS 0.86%
CakePHP Database\\Query::offset() and limit() methods are vulnerable to SQL injection
Action: Upgrade cakephp/database to 4.2.12 or later.
composer require cakephp/database:4.2.12composer require cakephp/database:4.3.11composer require cakephp/database:4.4.10Affected
| introduced | fixed | last affected |
|---|---|---|
| 4.2.0 | 4.2.12 | - |
| 4.3.0 | 4.3.11 | - |
| 4.4.0 | 4.4.10 | - |
Fixed versions
| 4.2.12 | 4.3.11 | 4.4.10 |
Sources
- osv: GHSA-6g8q-qfpv-57wp#Packagist/cakephp/database
- https://github.com/cakephp/cakephp/security/advisories/GHSA-6g8q-qfpv-57wp
- https://nvd.nist.gov/vuln/detail/CVE-2023-22727
- https://github.com/cakephp/cakephp/commit/3f463e7084b5a15e67205ced3a622577cca7a239
- https://bakery.cakephp.org/2023/01/06/cakephp_4211_4311_4410_released.html
- https://github.com/cakephp/cakephp
CVE-2023-22727 · published · modified · JSON