CakePHP allows remote attackers to modify internal Cake cache and execute arbitrary code

高 7.5CVE-2010-4335 · GHSA-g2vx-8v47-4vhh · 14/01/2011 公開 · 16/06/2026 更新

要点

CVE-2010-4335 は cakephp/cakephp, cakephp (cakefoundation), cakephp (cakephp) に影響する深刻度「高」 (CVSS 7.5) の脆弱性です。
今後30日間に悪用される確率（EPSS）：55.2%（全脆弱性の 99.0% より高い）。
対処：1.3.6 以降に更新してください。

パッケージ	影響を受けるバージョン	修正済みバージョン
cakephp/cakephp Packagist	`≥ 1.2.8, < 1.3.6`	`1.3.6`
cakephp cakefoundation	`= 1.3.0`	修正版なし
cakephp cakephp	`= 1.2.8= 1.3= 1.3.0= 1.3.1= 1.3.2= 1.3.3= 1.3.4= 1.3.5`	修正版なし

概要

The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted data[_Token][fields] value that is processed by the unserialize function, as demonstrated by modifying the file_map cache to execute arbitrary local files.

NVD の説明

The _validatePost function in libs/controller/components/security.php in CakePHP 1.3.x through 1.3.5 and 1.2.8 allows remote attackers to modify the internal Cake cache and execute arbitrary code via a crafted data[_Token][fields] value that is processed by the unserialize function, as demonstrated by modifying the file_map cache to execute arbitrary local files.