CVE-2020-15400
CakePHP before 4.0.6 mishandles CSRF token generation. This might be remotely exploitable in conjunction with XSS.
4.3CVSS
4.5AI Score
0.001EPSS