CakePHP has incorrect Cross-Site Request Forgery validation

Description

References

• cakephp/cakephp commit 522ed2f · WEB
• bakery.cakephp.org/2015/05/07/cakephp_3_0_4_released.html · WEB
• FriendsOfPHP/security-advisories · WEB
• cakephp/cakephp · PACKAGE

Altre vulnerabilità di cakephp/cakephp

• CVE-2026-79752CRITICO 9.2CakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, FunctionsBuilder::cast, FunctionsBuilder…
• CVE-2026-119417ALTOCakePHP: SmtpTransport vulnerable to CRLF header injection
• CVE-2026-77635CRITICO 9.2CakePHP is a rapid development framework for PHP. Prior to versions 5.1.10, 5.2.15, and 5.3.7 on their respective release lines, FunctionsBu…
• CVE-2026-48820MEDIO 6.3CakePHP is a rapid development framework for PHP. In versions 4.5.11 and earlier, 4.6.0 through 4.6.3, 5.0.0 through 5.1.6, 5.2.0 through 5.…
• CVE-2026-23643MEDIO 5.4CakePHP is a rapid development framework for PHP. The PaginatorHelper::limitControl() method has a cross-site-scripting vulnerability via qu…