Staging Environment: Content and features may be unstable or change without notice.
Search for packages
Package details: pkg:deb/debian/cakephp@1.3.15-1
purl pkg:deb/debian/cakephp@1.3.15-1
Next non-vulnerable version 2.8.5-1
Latest non-vulnerable version 2.8.5-1
Risk 10.0
Vulnerabilities affecting this package (2)
Vulnerability Summary Fixed by
VCID-251n-1k53-57dd
Aliases:
CVE-2015-8379
GHSA-556q-h4vr-pgh2
CakePHP 2.x and 3.x before 3.1.5 might allow remote attackers to bypass the CSRF protection mechanism via the _method parameter.
2.8.5-1
Affected by 0 other vulnerabilities.
VCID-3cx6-dpsf-xkhw
Aliases:
CVE-2016-4793
GHSA-j8p3-8m69-2hqq
The clientIp function in CakePHP 3.2.4 and earlier allows remote attackers to spoof their IP via the CLIENT-IP HTTP header.
2.8.5-1
Affected by 0 other vulnerabilities.
Vulnerabilities fixed by this package (0)
Vulnerability Summary Aliases
This package is not known to fix vulnerabilities.

Date Actor Action Vulnerability Source VulnerableCode Version
2026-06-13T04:49:41.507638+00:00 Debian Oval Importer Affected by VCID-3cx6-dpsf-xkhw https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0
2026-06-13T04:41:46.533433+00:00 Debian Oval Importer Affected by VCID-251n-1k53-57dd https://www.debian.org/security/oval/oval-definitions-bullseye.xml.bz2 38.6.0