Lucene search
GoogleOSV:GHSA-J33J-FG2G-MCV2HistoryFeb 10, 2022 - 10:27 p.m.
Cross-Site Request Forgery in CakePHP
2022-02-1022:27:58
Google
osv.dev
10
cakephp
cross-site request forgery
csrf token
xss
security vulnerability
EPSS
0.001
Percentile
21.6%
CakePHP before 4.0.6 and 3.10.3 mishandles CSRF token generation. This might be remotely exploitable in conjunction with XSS.
Related
cve
cve
CVE-2020-15400
2020-06-30 12:15:12
nvd
nvd
CVE-2020-15400
2020-06-30 12:15:12
ubuntucve
ubuntucve
CVE-2020-15400
2020-06-30 00:00:00
cvelist
cvelist
CVE-2020-15400
2020-06-30 11:42:19
github
github
Cross-Site Request Forgery in CakePHP
2022-02-10 22:27:58
debiancve
debiancve
CVE-2020-15400
2020-06-30 12:15:12
osv
osv
CVE-2020-15400
2020-06-30 12:15:12
prion
prion
Design/Logic Flaw
2020-06-30 12:15:00