Skip to content
OpenAdvisories

Product · cakephp

authentication

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.1
    CVE-2026-55590

    CakePHP: Open redirect weakness via backslash bypass

    CakePHP Authentication is an authentication plugin for CakePHP that can also be used in PSR-7 based applications. Prior to 2.11.1, 3.3.6, and 4.1.1, the getLoginRedirect() method contains a weakness to backslash bypasses that allows redirect targets with atta…

    cakephp authentication cakephp/authentication Packagist