CVE-2020-15400

Опубликовано: 30 июн. 2020

Источник: debian

EPSS Низкий

Описание

CakePHP before 4.0.6 mishandles CSRF token generation. This might be remotely exploitable in conjunction with XSS.

Пакет	Статус	Релиз	Тип
cakephp	removed		package
cakephp	ignored	bullseye	package
cakephp	ignored	buster	package
cakephp	no-dsa	stretch	package

EPSS

Процентиль: 38%

0.0017

Низкий

CVE-2020-15400

CVSS3: 4.3

ubuntu

больше 5 лет назад

CakePHP before 4.0.6 mishandles CSRF token generation. This might be remotely exploitable in conjunction with XSS.

CVE-2020-15400

CVSS3: 4.3

nvd

больше 5 лет назад

CakePHP before 4.0.6 mishandles CSRF token generation. This might be remotely exploitable in conjunction with XSS.

GHSA-j33j-fg2g-mcv2

CVSS3: 4.3

github

почти 4 года назад

Cross-Site Request Forgery in CakePHP

EPSS

Процентиль: 38%

0.0017

Низкий