Cross-Site Request Forgery in CakePHP

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2020-15400 · ADVISORY
• bakery.cakephp.org/2020/04/18/cakephp_406_released.html · WEB
• bakery.cakephp.org/2022/05/08/cakephp_3103_released.html · WEB

cakephp/cakephp のその他の脆弱性

• CVE-2026-79752緊急 9.2CakePHP is a rapid development framework for PHP. Prior to 4.5.12, 4.6.5, 5.1.9, 5.2.14, and 5.3.7, FunctionsBuilder::cast, FunctionsBuilder…
• CVE-2026-119417高CakePHP: SmtpTransport vulnerable to CRLF header injection
• CVE-2026-77635緊急 9.2CakePHP is a rapid development framework for PHP. Prior to versions 5.1.10, 5.2.15, and 5.3.7 on their respective release lines, FunctionsBu…
• CVE-2026-48820中 6.3CakePHP is a rapid development framework for PHP. In versions 4.5.11 and earlier, 4.6.0 through 4.6.3, 5.0.0 through 5.1.6, 5.2.0 through 5.…
• CVE-2026-23643中 5.4CakePHP is a rapid development framework for PHP. The PaginatorHelper::limitControl() method has a cross-site-scripting vulnerability via qu…