Vulnerabilities in cakephp
10 resultsVexday analysis
CakePHP apresenta 4 vulnerabilidades catalogadas, com 1 crítica e 2 publicadas nos últimos 90 dias, indicando risco moderado e ativo. A fraqueza dominante é path traversal (CWE-22), típica de contaminação de entrada em manipulação de arquivos. Nenhuma dessas vulnerabilidades está sob exploração confirmada em ambiente selvagem, reduzindo a urgência tática, mas a recência das publicações recomenda revisão preventiva.
CVE-2023-22727CRITICALDatabase Query::offset() and limit() vulnerable to SQL injection in cakephpEPSS 0.9%CVE-2026-77337CRITICALCakePHP: Potential Authentication bypass with CookieAuthenticatorEPSS 0.7%CVE-2026-79752CRITICALCakePHP: Multiple methods in FunctionsBuilder vulnerable to SQL injectionEPSS 0.6%CVE-2026-77634HIGHCakePHP: SmtpTransport vulnerable to CRLF header injectionEPSS 0.5%CVE-2026-54614MEDIUMDebugKit: MailPreview contains unsafe reflectionEPSS 0.5%CVE-2026-77635CRITICALCakePHP: FunctionsBuilder::jsonValue() vulerable to SQL injection with PostgresDriverEPSS 0.5%CVE-2026-55590MEDIUMCakePHP: Open redirect weakness via backslash bypassEPSS 0.5%CVE-2026-54713LOWCakePHP Queue: Incomplete Comparison in getUniqueId vulnerable to collisionsEPSS 0.5%CVE-2026-48820MEDIUMCakePHP: View::element() is missing a path containment checkEPSS 0.4%CVE-2026-23643MEDIUMCakePHP PaginatorHelper::limitControl() vulnerable to reflected cross-site-scriptingEPSS 0.3%