WS-2023-0016

CakePHP 2.x prior to 2.0.99, 2.1.99, 2.2.99, 2.3.99, 2.4.99, 2.5.99, 2.6.12, and 2.7.6 and 3.x prior to 3.0.15 and 3.1.4 is vulnerable to Remote File Inclusion through View template name manipulation...

PT-2023-33046

Name of the Vulnerable Software and Affected Versions CakePHP versions 2.x prior to 2.7.6 CakePHP versions 3.x prior to 3.1.4 Description The issue allows for Remote File Inclusion through View template name manipulation. Recommendations For CakePHP versions 2.x prior to 2.7.6, update to version...