Skip to content
OpenAdvisories

Archive

26 January 2016

Vulnerabilities first published on this day (UTC), newest first.

1 result · Clear filters · Feed

  • High 8.8

    CakePHP might allow remote attackers to bypass CSRF protection mechanism via the _method parameter

    CakePHP 2.x and 3.x before 3.1.5 might allow remote attackers to bypass the CSRF protection mechanism via the _method parameter.