Package Instance
Lookup for vulnerable packages by Package URL.
GET /api/packages/52282?format=api
{ "url": "http://public2.vulnerablecode.io/api/packages/52282?format=api", "purl": "pkg:composer/cakephp/cakephp@2.2.0", "type": "composer", "namespace": "cakephp", "name": "cakephp", "version": "2.2.0", "qualifiers": {}, "subpath": "", "is_vulnerable": true, "next_non_vulnerable_version": "3.10.3", "latest_non_vulnerable_version": "5.3.1", "affected_by_vulnerabilities": [ { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/44248?format=api", "vulnerability_id": "VCID-6x9m-nyfs-a7hq", "summary": "CakePHP vulnerable to Denial of Service attack through XML payloads\nRequestHandlerComponent had a vulnerability that would allow well crafted requests to create a denial of service attack. RequestHandlerComponent leverages `Xml::build()` which allows reading local files. We recommend that all applications using RequestHandlerComponent upgrade, or disable parsing XML payloads.", "references": [ { "reference_url": "https://bakery.cakephp.org/2015/05/28/cakephp_2_6_6_and_3_0_6_released.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bakery.cakephp.org/2015/05/28/cakephp_2_6_6_and_3_0_6_released.html" }, { "reference_url": "https://github.com/cakephp/cakephp", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/cakephp/cakephp" }, { "reference_url": "https://github.com/cakephp/cakephp/commit/c186487151356a8d7c6e2cae05f87b9df0e59fbb", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/cakephp/cakephp/commit/c186487151356a8d7c6e2cae05f87b9df0e59fbb" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/cakephp/cakephp/2015-05-28.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/cakephp/cakephp/2015-05-28.yaml" }, { "reference_url": "https://github.com/advisories/GHSA-q79m-c546-2g63", "reference_id": "GHSA-q79m-c546-2g63", "reference_type": "", "scores": [ { "value": "HIGH", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-q79m-c546-2g63" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/63655?format=api", "purl": "pkg:composer/cakephp/cakephp@2.2.99", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.2.99" }, { "url": "http://public2.vulnerablecode.io/api/packages/63656?format=api", "purl": "pkg:composer/cakephp/cakephp@2.3.99", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.3.99" }, { "url": "http://public2.vulnerablecode.io/api/packages/63657?format=api", "purl": "pkg:composer/cakephp/cakephp@2.4.99", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.4.99" }, { "url": "http://public2.vulnerablecode.io/api/packages/198671?format=api", "purl": "pkg:composer/cakephp/cakephp@2.5.0-RC1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-f8wn-raej-7qg4" }, { "vulnerability": "VCID-qzjr-cpgd-uba7" }, { "vulnerability": "VCID-wyxz-rb2r-zfck" }, { "vulnerability": "VCID-zbjb-pafr-uudq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.0-RC1" }, { "url": "http://public2.vulnerablecode.io/api/packages/63658?format=api", "purl": "pkg:composer/cakephp/cakephp@2.5.90", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.90" }, { "url": "http://public2.vulnerablecode.io/api/packages/201142?format=api", "purl": "pkg:composer/cakephp/cakephp@2.6.0-RC1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-f8wn-raej-7qg4" }, { "vulnerability": "VCID-zbjb-pafr-uudq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.0-RC1" }, { "url": "http://public2.vulnerablecode.io/api/packages/52287?format=api", "purl": "pkg:composer/cakephp/cakephp@2.6.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-cz9h-hf83-eycy" }, { "vulnerability": "VCID-f8wn-raej-7qg4" }, { "vulnerability": "VCID-qun9-tgkq-d7an" }, { "vulnerability": "VCID-qzjr-cpgd-uba7" }, { "vulnerability": "VCID-s536-vx42-xbhk" }, { "vulnerability": "VCID-wyxz-rb2r-zfck" }, { "vulnerability": "VCID-zbjb-pafr-uudq" }, { "vulnerability": "VCID-zfgg-dd4t-zyhq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/52288?format=api", "purl": "pkg:composer/cakephp/cakephp@3.0.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-cz9h-hf83-eycy" }, { "vulnerability": "VCID-dha1-eyc9-7qff" }, { "vulnerability": "VCID-f8wn-raej-7qg4" }, { "vulnerability": "VCID-s536-vx42-xbhk" }, { "vulnerability": "VCID-zbjb-pafr-uudq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@3.0.6" } ], "aliases": [ "GHSA-q79m-c546-2g63", "GMS-2023-71" ], "risk_score": 4.0, "exploitability": "0.5", "weighted_severity": "8.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-6x9m-nyfs-a7hq" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/44250?format=api", "vulnerability_id": "VCID-cz9h-hf83-eycy", "summary": "CakePHP vulnerable to Remote File Inclusion through View template name manipulation\nCakePHP 2.x prior to 2.0.99, 2.1.99, 2.2.99, 2.3.99, 2.4.99, 2.5.99, 2.6.12, and 2.7.6 and 3.x prior to 3.0.15 and 3.1.4 is vulnerable to Remote File Inclusion through View template name manipulation.", "references": [ { "reference_url": "https://bakery.cakephp.org/2015/11/05/cakephp_3015_314_2612_276_released.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bakery.cakephp.org/2015/11/05/cakephp_3015_314_2612_276_released.html" }, { "reference_url": "https://github.com/cakephp/cakephp", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/cakephp/cakephp" }, { "reference_url": "https://github.com/cakephp/cakephp/commit/5e60cc5d182e6131e3fbdfdf69f49d560c9ff78b", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/cakephp/cakephp/commit/5e60cc5d182e6131e3fbdfdf69f49d560c9ff78b" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/cakephp/cakephp/2015-11-05.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/cakephp/cakephp/2015-11-05.yaml" }, { "reference_url": "https://github.com/advisories/GHSA-p76f-wr22-4rv6", "reference_id": "GHSA-p76f-wr22-4rv6", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-p76f-wr22-4rv6" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/63655?format=api", "purl": "pkg:composer/cakephp/cakephp@2.2.99", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.2.99" }, { "url": "http://public2.vulnerablecode.io/api/packages/63656?format=api", "purl": "pkg:composer/cakephp/cakephp@2.3.99", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.3.99" }, { "url": "http://public2.vulnerablecode.io/api/packages/63657?format=api", "purl": "pkg:composer/cakephp/cakephp@2.4.99", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.4.99" }, { "url": "http://public2.vulnerablecode.io/api/packages/198671?format=api", "purl": "pkg:composer/cakephp/cakephp@2.5.0-RC1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-f8wn-raej-7qg4" }, { "vulnerability": "VCID-qzjr-cpgd-uba7" }, { "vulnerability": "VCID-wyxz-rb2r-zfck" }, { "vulnerability": "VCID-zbjb-pafr-uudq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.0-RC1" }, { "url": "http://public2.vulnerablecode.io/api/packages/63662?format=api", "purl": "pkg:composer/cakephp/cakephp@2.5.99", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.99" }, { "url": "http://public2.vulnerablecode.io/api/packages/201142?format=api", "purl": "pkg:composer/cakephp/cakephp@2.6.0-RC1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-f8wn-raej-7qg4" }, { "vulnerability": "VCID-zbjb-pafr-uudq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.0-RC1" }, { "url": "http://public2.vulnerablecode.io/api/packages/52391?format=api", "purl": "pkg:composer/cakephp/cakephp@2.6.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-f8wn-raej-7qg4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/52392?format=api", "purl": "pkg:composer/cakephp/cakephp@2.7.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-f8wn-raej-7qg4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.7.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/52393?format=api", "purl": "pkg:composer/cakephp/cakephp@3.0.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-dha1-eyc9-7qff" }, { "vulnerability": "VCID-f8wn-raej-7qg4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@3.0.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/52394?format=api", "purl": "pkg:composer/cakephp/cakephp@3.1.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-dha1-eyc9-7qff" }, { "vulnerability": "VCID-f8wn-raej-7qg4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@3.1.4" } ], "aliases": [ "GHSA-p76f-wr22-4rv6", "GMS-2023-70" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-cz9h-hf83-eycy" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/44249?format=api", "vulnerability_id": "VCID-qun9-tgkq-d7an", "summary": "CakePHP allows direct access of prefixed controller actions\nUnconventional URL paths would allow direct access to prefixed actions without setting the correct request parameters.", "references": [ { "reference_url": "https://bakery.cakephp.org/2015/08/06/cakephp_2_5_9_2_6_10_2_7_2_released.html", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://bakery.cakephp.org/2015/08/06/cakephp_2_5_9_2_6_10_2_7_2_released.html" }, { "reference_url": "https://github.com/cakephp/cakephp", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/cakephp/cakephp" }, { "reference_url": "https://github.com/cakephp/cakephp/commit/056f24a77428ad35e23cab6840a72b7c25c4ccc0", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/cakephp/cakephp/commit/056f24a77428ad35e23cab6840a72b7c25c4ccc0" }, { "reference_url": "https://github.com/cakephp/cakephp/releases/tag/2.5.9", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/cakephp/cakephp/releases/tag/2.5.9" }, { "reference_url": "https://github.com/cakephp/cakephp/releases/tag/2.6.11", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/cakephp/cakephp/releases/tag/2.6.11" }, { "reference_url": "https://github.com/cakephp/cakephp/releases/tag/2.7.2", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/cakephp/cakephp/releases/tag/2.7.2" }, { "reference_url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/cakephp/cakephp/2015-08-06.yaml", "reference_id": "", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "generic_textual", "scoring_elements": "" } ], "url": "https://github.com/FriendsOfPHP/security-advisories/blob/master/cakephp/cakephp/2015-08-06.yaml" }, { "reference_url": "https://github.com/advisories/GHSA-6hg4-vp5q-47mw", "reference_id": "GHSA-6hg4-vp5q-47mw", "reference_type": "", "scores": [ { "value": "MODERATE", "scoring_system": "cvssv3.1_qr", "scoring_elements": "" } ], "url": "https://github.com/advisories/GHSA-6hg4-vp5q-47mw" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/63655?format=api", "purl": "pkg:composer/cakephp/cakephp@2.2.99", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.2.99" }, { "url": "http://public2.vulnerablecode.io/api/packages/63656?format=api", "purl": "pkg:composer/cakephp/cakephp@2.3.99", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.3.99" }, { "url": "http://public2.vulnerablecode.io/api/packages/63657?format=api", "purl": "pkg:composer/cakephp/cakephp@2.4.99", "is_vulnerable": false, "affected_by_vulnerabilities": [], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.4.99" }, { "url": "http://public2.vulnerablecode.io/api/packages/198671?format=api", "purl": "pkg:composer/cakephp/cakephp@2.5.0-RC1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-f8wn-raej-7qg4" }, { "vulnerability": "VCID-qzjr-cpgd-uba7" }, { "vulnerability": "VCID-wyxz-rb2r-zfck" }, { "vulnerability": "VCID-zbjb-pafr-uudq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.0-RC1" }, { "url": "http://public2.vulnerablecode.io/api/packages/52340?format=api", "purl": "pkg:composer/cakephp/cakephp@2.5.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6x9m-nyfs-a7hq" }, { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-cz9h-hf83-eycy" }, { "vulnerability": "VCID-f8wn-raej-7qg4" }, { "vulnerability": "VCID-s536-vx42-xbhk" }, { "vulnerability": "VCID-zbjb-pafr-uudq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/52341?format=api", "purl": "pkg:composer/cakephp/cakephp@2.6.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-cz9h-hf83-eycy" }, { "vulnerability": "VCID-f8wn-raej-7qg4" }, { "vulnerability": "VCID-s536-vx42-xbhk" }, { "vulnerability": "VCID-zbjb-pafr-uudq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/52342?format=api", "purl": "pkg:composer/cakephp/cakephp@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-cz9h-hf83-eycy" }, { "vulnerability": "VCID-f8wn-raej-7qg4" }, { "vulnerability": "VCID-s536-vx42-xbhk" }, { "vulnerability": "VCID-zbjb-pafr-uudq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.7.2" } ], "aliases": [ "GHSA-6hg4-vp5q-47mw", "GMS-2023-67" ], "risk_score": 3.1, "exploitability": "0.5", "weighted_severity": "6.2", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-qun9-tgkq-d7an" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/37936?format=api", "vulnerability_id": "VCID-s536-vx42-xbhk", "summary": "PHP Remote File Inclusion\nRemote File Inclusion through View template name manipulation.", "references": [ { "reference_url": "https://bakery.cakephp.org/2015/11/05/cakephp_3015_314_2612_276_released.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bakery.cakephp.org/2015/11/05/cakephp_3015_314_2612_276_released.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/198671?format=api", "purl": "pkg:composer/cakephp/cakephp@2.5.0-RC1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-f8wn-raej-7qg4" }, { "vulnerability": "VCID-qzjr-cpgd-uba7" }, { "vulnerability": "VCID-wyxz-rb2r-zfck" }, { "vulnerability": "VCID-zbjb-pafr-uudq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.0-RC1" }, { "url": "http://public2.vulnerablecode.io/api/packages/201142?format=api", "purl": "pkg:composer/cakephp/cakephp@2.6.0-RC1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-f8wn-raej-7qg4" }, { "vulnerability": "VCID-zbjb-pafr-uudq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.0-RC1" }, { "url": "http://public2.vulnerablecode.io/api/packages/52391?format=api", "purl": "pkg:composer/cakephp/cakephp@2.6.12", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-f8wn-raej-7qg4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.12" }, { "url": "http://public2.vulnerablecode.io/api/packages/201271?format=api", "purl": "pkg:composer/cakephp/cakephp@2.7.0-RC", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-f8wn-raej-7qg4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.7.0-RC" }, { "url": "http://public2.vulnerablecode.io/api/packages/52392?format=api", "purl": "pkg:composer/cakephp/cakephp@2.7.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-f8wn-raej-7qg4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.7.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/201148?format=api", "purl": "pkg:composer/cakephp/cakephp@3.0.0-RC1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-f8wn-raej-7qg4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@3.0.0-RC1" }, { "url": "http://public2.vulnerablecode.io/api/packages/52393?format=api", "purl": "pkg:composer/cakephp/cakephp@3.0.15", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-dha1-eyc9-7qff" }, { "vulnerability": "VCID-f8wn-raej-7qg4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@3.0.15" }, { "url": "http://public2.vulnerablecode.io/api/packages/201982?format=api", "purl": "pkg:composer/cakephp/cakephp@3.1.0-RC1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-dha1-eyc9-7qff" }, { "vulnerability": "VCID-f8wn-raej-7qg4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@3.1.0-RC1" }, { "url": "http://public2.vulnerablecode.io/api/packages/52394?format=api", "purl": "pkg:composer/cakephp/cakephp@3.1.4", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-dha1-eyc9-7qff" }, { "vulnerability": "VCID-f8wn-raej-7qg4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@3.1.4" } ], "aliases": [ "GMS-2015-64" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-s536-vx42-xbhk" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/37858?format=api", "vulnerability_id": "VCID-yps8-ffx6-3fay", "summary": "Uncontrolled Resource Consumption\nDenial of Service attack through XML payloads", "references": [ { "reference_url": "https://bakery.cakephp.org/2015/05/28/cakephp_2_6_6_and_3_0_6_released.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bakery.cakephp.org/2015/05/28/cakephp_2_6_6_and_3_0_6_released.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/198671?format=api", "purl": "pkg:composer/cakephp/cakephp@2.5.0-RC1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-f8wn-raej-7qg4" }, { "vulnerability": "VCID-qzjr-cpgd-uba7" }, { "vulnerability": "VCID-wyxz-rb2r-zfck" }, { "vulnerability": "VCID-zbjb-pafr-uudq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.0-RC1" }, { "url": "http://public2.vulnerablecode.io/api/packages/201142?format=api", "purl": "pkg:composer/cakephp/cakephp@2.6.0-RC1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-f8wn-raej-7qg4" }, { "vulnerability": "VCID-zbjb-pafr-uudq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.0-RC1" }, { "url": "http://public2.vulnerablecode.io/api/packages/52287?format=api", "purl": "pkg:composer/cakephp/cakephp@2.6.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-cz9h-hf83-eycy" }, { "vulnerability": "VCID-f8wn-raej-7qg4" }, { "vulnerability": "VCID-qun9-tgkq-d7an" }, { "vulnerability": "VCID-qzjr-cpgd-uba7" }, { "vulnerability": "VCID-s536-vx42-xbhk" }, { "vulnerability": "VCID-wyxz-rb2r-zfck" }, { "vulnerability": "VCID-zbjb-pafr-uudq" }, { "vulnerability": "VCID-zfgg-dd4t-zyhq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.6" }, { "url": "http://public2.vulnerablecode.io/api/packages/201148?format=api", "purl": "pkg:composer/cakephp/cakephp@3.0.0-RC1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-f8wn-raej-7qg4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@3.0.0-RC1" }, { "url": "http://public2.vulnerablecode.io/api/packages/52288?format=api", "purl": "pkg:composer/cakephp/cakephp@3.0.6", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-cz9h-hf83-eycy" }, { "vulnerability": "VCID-dha1-eyc9-7qff" }, { "vulnerability": "VCID-f8wn-raej-7qg4" }, { "vulnerability": "VCID-s536-vx42-xbhk" }, { "vulnerability": "VCID-zbjb-pafr-uudq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@3.0.6" } ], "aliases": [ "GMS-2015-62" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-yps8-ffx6-3fay" }, { "url": "http://public2.vulnerablecode.io/api/vulnerabilities/37893?format=api", "vulnerability_id": "VCID-zfgg-dd4t-zyhq", "summary": "Direct access of prefixed controller actions\nUnconventional URL paths would allow direct access to prefixed actions without setting the correct request parameters. If your authorization depends on the presence of the prefix routing key you should upgrade as soon as possible.", "references": [ { "reference_url": "https://bakery.cakephp.org/2015/08/06/cakephp_2_5_9_2_6_10_2_7_2_released.html", "reference_id": "", "reference_type": "", "scores": [], "url": "https://bakery.cakephp.org/2015/08/06/cakephp_2_5_9_2_6_10_2_7_2_released.html" } ], "fixed_packages": [ { "url": "http://public2.vulnerablecode.io/api/packages/198671?format=api", "purl": "pkg:composer/cakephp/cakephp@2.5.0-RC1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-f8wn-raej-7qg4" }, { "vulnerability": "VCID-qzjr-cpgd-uba7" }, { "vulnerability": "VCID-wyxz-rb2r-zfck" }, { "vulnerability": "VCID-zbjb-pafr-uudq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.0-RC1" }, { "url": "http://public2.vulnerablecode.io/api/packages/52340?format=api", "purl": "pkg:composer/cakephp/cakephp@2.5.9", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-6x9m-nyfs-a7hq" }, { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-cz9h-hf83-eycy" }, { "vulnerability": "VCID-f8wn-raej-7qg4" }, { "vulnerability": "VCID-s536-vx42-xbhk" }, { "vulnerability": "VCID-zbjb-pafr-uudq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.9" }, { "url": "http://public2.vulnerablecode.io/api/packages/201142?format=api", "purl": "pkg:composer/cakephp/cakephp@2.6.0-RC1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-f8wn-raej-7qg4" }, { "vulnerability": "VCID-zbjb-pafr-uudq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.0-RC1" }, { "url": "http://public2.vulnerablecode.io/api/packages/52341?format=api", "purl": "pkg:composer/cakephp/cakephp@2.6.11", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-cz9h-hf83-eycy" }, { "vulnerability": "VCID-f8wn-raej-7qg4" }, { "vulnerability": "VCID-s536-vx42-xbhk" }, { "vulnerability": "VCID-zbjb-pafr-uudq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.11" }, { "url": "http://public2.vulnerablecode.io/api/packages/201271?format=api", "purl": "pkg:composer/cakephp/cakephp@2.7.0-RC", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-f8wn-raej-7qg4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.7.0-RC" }, { "url": "http://public2.vulnerablecode.io/api/packages/52342?format=api", "purl": "pkg:composer/cakephp/cakephp@2.7.2", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-cz9h-hf83-eycy" }, { "vulnerability": "VCID-f8wn-raej-7qg4" }, { "vulnerability": "VCID-s536-vx42-xbhk" }, { "vulnerability": "VCID-zbjb-pafr-uudq" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.7.2" }, { "url": "http://public2.vulnerablecode.io/api/packages/201148?format=api", "purl": "pkg:composer/cakephp/cakephp@3.0.0-RC1", "is_vulnerable": true, "affected_by_vulnerabilities": [ { "vulnerability": "VCID-84hg-51gr-2qhx" }, { "vulnerability": "VCID-cp8q-ar71-mqdf" }, { "vulnerability": "VCID-f8wn-raej-7qg4" } ], "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@3.0.0-RC1" } ], "aliases": [ "GMS-2015-63" ], "risk_score": null, "exploitability": "0.5", "weighted_severity": "0.0", "resource_url": "http://public2.vulnerablecode.io/vulnerabilities/VCID-zfgg-dd4t-zyhq" } ], "fixing_vulnerabilities": [], "risk_score": "4.0", "resource_url": "http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.2.0" }