PT-2016-7944 · Cakephp · Cakephp

Published 2016-02-05 · Updated 2016-02-05

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions CakePHP (affected versions not specified)

Description The issue is related to Server Side Request Forgery (SSRF) attacks, which can be utilized for Denial of Service (DoS) attacks. This is caused by the insecure design of Cake's Xml class, particularly when the target application accepts XML as an input.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

MGASA-2016-0044

Affected Products

Cakephp

References · 4

• https://osv.dev/vulnerability/MGASA-2016-0044 · Vendor Advisory
• https://advisories.mageia.org/MGASA-2016-0044.html · Security Note
• https://bugs.mageia.org/show_bug.cgi?id=17003 · Note
• http://lwn.net/Alerts/661886 · Note