CakePHP 2.x and 3.x before 3.1.5 might allow remote attackers to bypass the CSRF protection mechanism via the _method parameter.
References
Configurations
Configuration 1 (hide)
|
History
No history.
Information
Published : 2016-01-26 19:59
Updated : 2024-02-04 18:53
NVD link : CVE-2015-8379
Mitre link : CVE-2015-8379
CVE.ORG link : CVE-2015-8379
JSON object : View
Products Affected
cakephp
- cakephp
CWE
CWE-352
Cross-Site Request Forgery (CSRF)