Nirmal Kirubakaran

**Name of the Vulnerable Software and Affected Versions** CakePHP versions prior to 4.0.6 CakePHP versions prior to 3.10.3 **Description** The issue is related to the mishandling of CSRF token generation, which could potentially be exploited remotely when combined with a cross-site scripting (XSS) attack. **Recommendations** For versions prior to 4.0.6, update to version 4.0.6 or later to resolve the issue. For versions prior to 3.10.3, update to version 3.10.3 or later to resolve the issue.