Django REST framework

Package Instance

Lookup for vulnerable packages by Package URL.

Purlpkg:composer/cakephp/cakephp@2.1.0
Typecomposer
Namespacecakephp
Namecakephp
Version2.1.0
Qualifiers
Subpath
Is_vulnerabletrue
Next_non_vulnerable_version3.10.3
Latest_non_vulnerable_version5.3.1
Affected_by_vulnerabilities
0
url VCID-6x9m-nyfs-a7hq
vulnerability_id VCID-6x9m-nyfs-a7hq
summary 
CakePHP vulnerable to Denial of Service attack through XML payloads
RequestHandlerComponent had a vulnerability that would allow well crafted requests to create a denial of service attack. RequestHandlerComponent leverages `Xml::build()` which allows reading local files. We recommend that all applications using RequestHandlerComponent upgrade, or disable parsing XML payloads.
references
0
reference_url https://bakery.cakephp.org/2015/05/28/cakephp_2_6_6_and_3_0_6_released.html
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://bakery.cakephp.org/2015/05/28/cakephp_2_6_6_and_3_0_6_released.html
1
reference_url https://github.com/cakephp/cakephp
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/cakephp/cakephp
2
reference_url https://github.com/cakephp/cakephp/commit/c186487151356a8d7c6e2cae05f87b9df0e59fbb
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/cakephp/cakephp/commit/c186487151356a8d7c6e2cae05f87b9df0e59fbb
3
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/cakephp/cakephp/2015-05-28.yaml
reference_id
reference_type
scores
0
value HIGH
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/cakephp/cakephp/2015-05-28.yaml
4
reference_url https://github.com/advisories/GHSA-q79m-c546-2g63
reference_id GHSA-q79m-c546-2g63
reference_type
scores
url https://github.com/advisories/GHSA-q79m-c546-2g63
fixed_packages
0
url pkg:composer/cakephp/cakephp@2.1.99
purl pkg:composer/cakephp/cakephp@2.1.99
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.1.99
1
url pkg:composer/cakephp/cakephp@2.2.99
purl pkg:composer/cakephp/cakephp@2.2.99
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.2.99
2
url pkg:composer/cakephp/cakephp@2.3.99
purl pkg:composer/cakephp/cakephp@2.3.99
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.3.99
3
url pkg:composer/cakephp/cakephp@2.4.99
purl pkg:composer/cakephp/cakephp@2.4.99
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.4.99
4
url pkg:composer/cakephp/cakephp@2.5.0-RC1
purl pkg:composer/cakephp/cakephp@2.5.0-RC1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-f8wn-raej-7qg4
3
vulnerability VCID-qzjr-cpgd-uba7
4
vulnerability VCID-wyxz-rb2r-zfck
5
vulnerability VCID-zbjb-pafr-uudq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.0-RC1
5
url pkg:composer/cakephp/cakephp@2.5.90
purl pkg:composer/cakephp/cakephp@2.5.90
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.90
6
url pkg:composer/cakephp/cakephp@2.6.0-RC1
purl pkg:composer/cakephp/cakephp@2.6.0-RC1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-f8wn-raej-7qg4
3
vulnerability VCID-zbjb-pafr-uudq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.0-RC1
7
url pkg:composer/cakephp/cakephp@2.6.6
purl pkg:composer/cakephp/cakephp@2.6.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-cz9h-hf83-eycy
3
vulnerability VCID-f8wn-raej-7qg4
4
vulnerability VCID-qun9-tgkq-d7an
5
vulnerability VCID-qzjr-cpgd-uba7
6
vulnerability VCID-s536-vx42-xbhk
7
vulnerability VCID-wyxz-rb2r-zfck
8
vulnerability VCID-zbjb-pafr-uudq
9
vulnerability VCID-zfgg-dd4t-zyhq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.6
8
url pkg:composer/cakephp/cakephp@3.0.6
purl pkg:composer/cakephp/cakephp@3.0.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-cz9h-hf83-eycy
3
vulnerability VCID-dha1-eyc9-7qff
4
vulnerability VCID-f8wn-raej-7qg4
5
vulnerability VCID-s536-vx42-xbhk
6
vulnerability VCID-zbjb-pafr-uudq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@3.0.6
aliases GHSA-q79m-c546-2g63, GMS-2023-71
risk_score 4.0
exploitability 0.5
weighted_severity 8.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-6x9m-nyfs-a7hq
1
url VCID-cz9h-hf83-eycy
vulnerability_id VCID-cz9h-hf83-eycy
summary 
CakePHP vulnerable to Remote File Inclusion through View template name manipulation
CakePHP 2.x prior to 2.0.99, 2.1.99, 2.2.99, 2.3.99, 2.4.99, 2.5.99, 2.6.12, and 2.7.6 and 3.x prior to 3.0.15 and 3.1.4 is vulnerable to Remote File Inclusion through View template name manipulation.
references
0
reference_url https://bakery.cakephp.org/2015/11/05/cakephp_3015_314_2612_276_released.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bakery.cakephp.org/2015/11/05/cakephp_3015_314_2612_276_released.html
1
reference_url https://github.com/cakephp/cakephp
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/cakephp/cakephp
2
reference_url https://github.com/cakephp/cakephp/commit/5e60cc5d182e6131e3fbdfdf69f49d560c9ff78b
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/cakephp/cakephp/commit/5e60cc5d182e6131e3fbdfdf69f49d560c9ff78b
3
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/cakephp/cakephp/2015-11-05.yaml
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/cakephp/cakephp/2015-11-05.yaml
4
reference_url https://github.com/advisories/GHSA-p76f-wr22-4rv6
reference_id GHSA-p76f-wr22-4rv6
reference_type
scores
url https://github.com/advisories/GHSA-p76f-wr22-4rv6
fixed_packages
0
url pkg:composer/cakephp/cakephp@2.1.99
purl pkg:composer/cakephp/cakephp@2.1.99
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.1.99
1
url pkg:composer/cakephp/cakephp@2.2.99
purl pkg:composer/cakephp/cakephp@2.2.99
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.2.99
2
url pkg:composer/cakephp/cakephp@2.3.99
purl pkg:composer/cakephp/cakephp@2.3.99
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.3.99
3
url pkg:composer/cakephp/cakephp@2.4.99
purl pkg:composer/cakephp/cakephp@2.4.99
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.4.99
4
url pkg:composer/cakephp/cakephp@2.5.0-RC1
purl pkg:composer/cakephp/cakephp@2.5.0-RC1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-f8wn-raej-7qg4
3
vulnerability VCID-qzjr-cpgd-uba7
4
vulnerability VCID-wyxz-rb2r-zfck
5
vulnerability VCID-zbjb-pafr-uudq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.0-RC1
5
url pkg:composer/cakephp/cakephp@2.5.99
purl pkg:composer/cakephp/cakephp@2.5.99
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.99
6
url pkg:composer/cakephp/cakephp@2.6.0-RC1
purl pkg:composer/cakephp/cakephp@2.6.0-RC1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-f8wn-raej-7qg4
3
vulnerability VCID-zbjb-pafr-uudq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.0-RC1
7
url pkg:composer/cakephp/cakephp@2.6.12
purl pkg:composer/cakephp/cakephp@2.6.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-f8wn-raej-7qg4
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.12
8
url pkg:composer/cakephp/cakephp@2.7.6
purl pkg:composer/cakephp/cakephp@2.7.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-f8wn-raej-7qg4
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.7.6
9
url pkg:composer/cakephp/cakephp@3.0.15
purl pkg:composer/cakephp/cakephp@3.0.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-dha1-eyc9-7qff
3
vulnerability VCID-f8wn-raej-7qg4
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@3.0.15
10
url pkg:composer/cakephp/cakephp@3.1.4
purl pkg:composer/cakephp/cakephp@3.1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-dha1-eyc9-7qff
3
vulnerability VCID-f8wn-raej-7qg4
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@3.1.4
aliases GHSA-p76f-wr22-4rv6, GMS-2023-70
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-cz9h-hf83-eycy
2
url VCID-qun9-tgkq-d7an
vulnerability_id VCID-qun9-tgkq-d7an
summary 
CakePHP allows direct access of prefixed controller actions
Unconventional URL paths would allow direct access to prefixed actions without setting the correct request parameters.
references
0
reference_url https://bakery.cakephp.org/2015/08/06/cakephp_2_5_9_2_6_10_2_7_2_released.html
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://bakery.cakephp.org/2015/08/06/cakephp_2_5_9_2_6_10_2_7_2_released.html
1
reference_url https://github.com/cakephp/cakephp
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/cakephp/cakephp
2
reference_url https://github.com/cakephp/cakephp/commit/056f24a77428ad35e23cab6840a72b7c25c4ccc0
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/cakephp/cakephp/commit/056f24a77428ad35e23cab6840a72b7c25c4ccc0
3
reference_url https://github.com/cakephp/cakephp/releases/tag/2.5.9
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/cakephp/cakephp/releases/tag/2.5.9
4
reference_url https://github.com/cakephp/cakephp/releases/tag/2.6.11
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/cakephp/cakephp/releases/tag/2.6.11
5
reference_url https://github.com/cakephp/cakephp/releases/tag/2.7.2
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/cakephp/cakephp/releases/tag/2.7.2
6
reference_url https://github.com/FriendsOfPHP/security-advisories/blob/master/cakephp/cakephp/2015-08-06.yaml
reference_id
reference_type
scores
0
value MODERATE
scoring_system generic_textual
scoring_elements
url https://github.com/FriendsOfPHP/security-advisories/blob/master/cakephp/cakephp/2015-08-06.yaml
7
reference_url https://github.com/advisories/GHSA-6hg4-vp5q-47mw
reference_id GHSA-6hg4-vp5q-47mw
reference_type
scores
url https://github.com/advisories/GHSA-6hg4-vp5q-47mw
fixed_packages
0
url pkg:composer/cakephp/cakephp@2.1.99
purl pkg:composer/cakephp/cakephp@2.1.99
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.1.99
1
url pkg:composer/cakephp/cakephp@2.2.99
purl pkg:composer/cakephp/cakephp@2.2.99
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.2.99
2
url pkg:composer/cakephp/cakephp@2.3.99
purl pkg:composer/cakephp/cakephp@2.3.99
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.3.99
3
url pkg:composer/cakephp/cakephp@2.4.99
purl pkg:composer/cakephp/cakephp@2.4.99
is_vulnerable false
affected_by_vulnerabilities
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.4.99
4
url pkg:composer/cakephp/cakephp@2.5.0-RC1
purl pkg:composer/cakephp/cakephp@2.5.0-RC1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-f8wn-raej-7qg4
3
vulnerability VCID-qzjr-cpgd-uba7
4
vulnerability VCID-wyxz-rb2r-zfck
5
vulnerability VCID-zbjb-pafr-uudq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.0-RC1
5
url pkg:composer/cakephp/cakephp@2.5.9
purl pkg:composer/cakephp/cakephp@2.5.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6x9m-nyfs-a7hq
1
vulnerability VCID-84hg-51gr-2qhx
2
vulnerability VCID-cp8q-ar71-mqdf
3
vulnerability VCID-cz9h-hf83-eycy
4
vulnerability VCID-f8wn-raej-7qg4
5
vulnerability VCID-s536-vx42-xbhk
6
vulnerability VCID-zbjb-pafr-uudq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.9
6
url pkg:composer/cakephp/cakephp@2.6.11
purl pkg:composer/cakephp/cakephp@2.6.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-cz9h-hf83-eycy
3
vulnerability VCID-f8wn-raej-7qg4
4
vulnerability VCID-s536-vx42-xbhk
5
vulnerability VCID-zbjb-pafr-uudq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.11
7
url pkg:composer/cakephp/cakephp@2.7.2
purl pkg:composer/cakephp/cakephp@2.7.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-cz9h-hf83-eycy
3
vulnerability VCID-f8wn-raej-7qg4
4
vulnerability VCID-s536-vx42-xbhk
5
vulnerability VCID-zbjb-pafr-uudq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.7.2
aliases GHSA-6hg4-vp5q-47mw, GMS-2023-67
risk_score 3.1
exploitability 0.5
weighted_severity 6.2
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-qun9-tgkq-d7an
3
url VCID-s536-vx42-xbhk
vulnerability_id VCID-s536-vx42-xbhk
summary 
PHP Remote File Inclusion
Remote File Inclusion through View template name manipulation.
references
0
reference_url https://bakery.cakephp.org/2015/11/05/cakephp_3015_314_2612_276_released.html
reference_id
reference_type
scores
url https://bakery.cakephp.org/2015/11/05/cakephp_3015_314_2612_276_released.html
fixed_packages
0
url pkg:composer/cakephp/cakephp@2.5.0-RC1
purl pkg:composer/cakephp/cakephp@2.5.0-RC1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-f8wn-raej-7qg4
3
vulnerability VCID-qzjr-cpgd-uba7
4
vulnerability VCID-wyxz-rb2r-zfck
5
vulnerability VCID-zbjb-pafr-uudq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.0-RC1
1
url pkg:composer/cakephp/cakephp@2.6.0-RC1
purl pkg:composer/cakephp/cakephp@2.6.0-RC1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-f8wn-raej-7qg4
3
vulnerability VCID-zbjb-pafr-uudq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.0-RC1
2
url pkg:composer/cakephp/cakephp@2.6.12
purl pkg:composer/cakephp/cakephp@2.6.12
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-f8wn-raej-7qg4
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.12
3
url pkg:composer/cakephp/cakephp@2.7.0-RC
purl pkg:composer/cakephp/cakephp@2.7.0-RC
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-f8wn-raej-7qg4
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.7.0-RC
4
url pkg:composer/cakephp/cakephp@2.7.6
purl pkg:composer/cakephp/cakephp@2.7.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-f8wn-raej-7qg4
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.7.6
5
url pkg:composer/cakephp/cakephp@3.0.0-RC1
purl pkg:composer/cakephp/cakephp@3.0.0-RC1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-f8wn-raej-7qg4
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@3.0.0-RC1
6
url pkg:composer/cakephp/cakephp@3.0.15
purl pkg:composer/cakephp/cakephp@3.0.15
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-dha1-eyc9-7qff
3
vulnerability VCID-f8wn-raej-7qg4
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@3.0.15
7
url pkg:composer/cakephp/cakephp@3.1.0-RC1
purl pkg:composer/cakephp/cakephp@3.1.0-RC1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-dha1-eyc9-7qff
3
vulnerability VCID-f8wn-raej-7qg4
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@3.1.0-RC1
8
url pkg:composer/cakephp/cakephp@3.1.4
purl pkg:composer/cakephp/cakephp@3.1.4
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-dha1-eyc9-7qff
3
vulnerability VCID-f8wn-raej-7qg4
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@3.1.4
aliases GMS-2015-64
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-s536-vx42-xbhk
4
url VCID-yps8-ffx6-3fay
vulnerability_id VCID-yps8-ffx6-3fay
summary 
Uncontrolled Resource Consumption
Denial of Service attack through XML payloads
references
0
reference_url https://bakery.cakephp.org/2015/05/28/cakephp_2_6_6_and_3_0_6_released.html
reference_id
reference_type
scores
url https://bakery.cakephp.org/2015/05/28/cakephp_2_6_6_and_3_0_6_released.html
fixed_packages
0
url pkg:composer/cakephp/cakephp@2.5.0-RC1
purl pkg:composer/cakephp/cakephp@2.5.0-RC1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-f8wn-raej-7qg4
3
vulnerability VCID-qzjr-cpgd-uba7
4
vulnerability VCID-wyxz-rb2r-zfck
5
vulnerability VCID-zbjb-pafr-uudq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.0-RC1
1
url pkg:composer/cakephp/cakephp@2.6.0-RC1
purl pkg:composer/cakephp/cakephp@2.6.0-RC1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-f8wn-raej-7qg4
3
vulnerability VCID-zbjb-pafr-uudq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.0-RC1
2
url pkg:composer/cakephp/cakephp@2.6.6
purl pkg:composer/cakephp/cakephp@2.6.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-cz9h-hf83-eycy
3
vulnerability VCID-f8wn-raej-7qg4
4
vulnerability VCID-qun9-tgkq-d7an
5
vulnerability VCID-qzjr-cpgd-uba7
6
vulnerability VCID-s536-vx42-xbhk
7
vulnerability VCID-wyxz-rb2r-zfck
8
vulnerability VCID-zbjb-pafr-uudq
9
vulnerability VCID-zfgg-dd4t-zyhq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.6
3
url pkg:composer/cakephp/cakephp@3.0.0-RC1
purl pkg:composer/cakephp/cakephp@3.0.0-RC1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-f8wn-raej-7qg4
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@3.0.0-RC1
4
url pkg:composer/cakephp/cakephp@3.0.6
purl pkg:composer/cakephp/cakephp@3.0.6
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-cz9h-hf83-eycy
3
vulnerability VCID-dha1-eyc9-7qff
4
vulnerability VCID-f8wn-raej-7qg4
5
vulnerability VCID-s536-vx42-xbhk
6
vulnerability VCID-zbjb-pafr-uudq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@3.0.6
aliases GMS-2015-62
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-yps8-ffx6-3fay
5
url VCID-zfgg-dd4t-zyhq
vulnerability_id VCID-zfgg-dd4t-zyhq
summary 
Direct access of prefixed controller actions
Unconventional URL paths would allow direct access to prefixed actions without setting the correct request parameters. If your authorization depends on the presence of the prefix routing key you should upgrade as soon as possible.
references
0
reference_url https://bakery.cakephp.org/2015/08/06/cakephp_2_5_9_2_6_10_2_7_2_released.html
reference_id
reference_type
scores
url https://bakery.cakephp.org/2015/08/06/cakephp_2_5_9_2_6_10_2_7_2_released.html
fixed_packages
0
url pkg:composer/cakephp/cakephp@2.5.0-RC1
purl pkg:composer/cakephp/cakephp@2.5.0-RC1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-f8wn-raej-7qg4
3
vulnerability VCID-qzjr-cpgd-uba7
4
vulnerability VCID-wyxz-rb2r-zfck
5
vulnerability VCID-zbjb-pafr-uudq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.0-RC1
1
url pkg:composer/cakephp/cakephp@2.5.9
purl pkg:composer/cakephp/cakephp@2.5.9
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-6x9m-nyfs-a7hq
1
vulnerability VCID-84hg-51gr-2qhx
2
vulnerability VCID-cp8q-ar71-mqdf
3
vulnerability VCID-cz9h-hf83-eycy
4
vulnerability VCID-f8wn-raej-7qg4
5
vulnerability VCID-s536-vx42-xbhk
6
vulnerability VCID-zbjb-pafr-uudq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.9
2
url pkg:composer/cakephp/cakephp@2.6.0-RC1
purl pkg:composer/cakephp/cakephp@2.6.0-RC1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-f8wn-raej-7qg4
3
vulnerability VCID-zbjb-pafr-uudq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.0-RC1
3
url pkg:composer/cakephp/cakephp@2.6.11
purl pkg:composer/cakephp/cakephp@2.6.11
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-cz9h-hf83-eycy
3
vulnerability VCID-f8wn-raej-7qg4
4
vulnerability VCID-s536-vx42-xbhk
5
vulnerability VCID-zbjb-pafr-uudq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.11
4
url pkg:composer/cakephp/cakephp@2.7.0-RC
purl pkg:composer/cakephp/cakephp@2.7.0-RC
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-f8wn-raej-7qg4
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.7.0-RC
5
url pkg:composer/cakephp/cakephp@2.7.2
purl pkg:composer/cakephp/cakephp@2.7.2
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-cz9h-hf83-eycy
3
vulnerability VCID-f8wn-raej-7qg4
4
vulnerability VCID-s536-vx42-xbhk
5
vulnerability VCID-zbjb-pafr-uudq
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.7.2
6
url pkg:composer/cakephp/cakephp@3.0.0-RC1
purl pkg:composer/cakephp/cakephp@3.0.0-RC1
is_vulnerable true
affected_by_vulnerabilities
0
vulnerability VCID-84hg-51gr-2qhx
1
vulnerability VCID-cp8q-ar71-mqdf
2
vulnerability VCID-f8wn-raej-7qg4
resource_url http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@3.0.0-RC1
aliases GMS-2015-63
risk_score null
exploitability 0.5
weighted_severity 0.0
resource_url http://public2.vulnerablecode.io/vulnerabilities/VCID-zfgg-dd4t-zyhq
Fixing_vulnerabilities
Risk_score4.0
Resource_urlhttp://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.1.0