| Package | Affected versions | Patched versions |
|---|---|---|
| cakephp/cakephp | ≥ 4.0.0, < 4.0.6< 3.10.3 | 4.0.63.10.3 |
| cakephp | < 4.0.6 | 4.0.6 |
CakePHP before 4.0.6 and 3.10.3 mishandles CSRF token generation. This might be remotely exploitable in conjunction with XSS.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free