{"url":"http://public2.vulnerablecode.io/api/vulnerabilities/360892?format=json","vulnerability_id":"VCID-v1q2-grgw-2fg2","summary":"CakePHP allows direct access of prefixed controller actions\nUnconventional URL paths would allow direct access to prefixed actions without setting the correct request parameters.","aliases":[{"alias":"GHSA-6hg4-vp5q-47mw"},{"alias":"GMS-2023-67"}],"fixed_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/401310?format=json","purl":"pkg:composer/cakephp/cakephp@2.5.0-RC1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-pndg-eaey-2ydk"},{"vulnerability":"VCID-ufhs-run3-kqag"},{"vulnerability":"VCID-yrzx-r3q3-43ej"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.0-RC1"},{"url":"http://public2.vulnerablecode.io/api/packages/379900?format=json","purl":"pkg:composer/cakephp/cakephp@2.5.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-4nzp-mvbw-5kax"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-yrzx-r3q3-43ej"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.9"},{"url":"http://public2.vulnerablecode.io/api/packages/379901?format=json","purl":"pkg:composer/cakephp/cakephp@2.6.11","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-yrzx-r3q3-43ej"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.11"},{"url":"http://public2.vulnerablecode.io/api/packages/379902?format=json","purl":"pkg:composer/cakephp/cakephp@2.7.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-yrzx-r3q3-43ej"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.7.2"}],"affected_packages":[{"url":"http://public2.vulnerablecode.io/api/packages/388149?format=json","purl":"pkg:composer/cakephp/cakephp@2.0.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4nzp-mvbw-5kax"},{"vulnerability":"VCID-8uvs-ff4c-gbf4"},{"vulnerability":"VCID-d5gm-79q5-hyg6"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yzq8-e9u1-3bbe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.0.0"},{"url":"http://public2.vulnerablecode.io/api/packages/388411?format=json","purl":"pkg:composer/cakephp/cakephp@2.1.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4nzp-mvbw-5kax"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yzq8-e9u1-3bbe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.1.0"},{"url":"http://public2.vulnerablecode.io/api/packages/388412?format=json","purl":"pkg:composer/cakephp/cakephp@2.2.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4nzp-mvbw-5kax"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yzq8-e9u1-3bbe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.2.0"},{"url":"http://public2.vulnerablecode.io/api/packages/388413?format=json","purl":"pkg:composer/cakephp/cakephp@2.3.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4nzp-mvbw-5kax"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yzq8-e9u1-3bbe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.3.0"},{"url":"http://public2.vulnerablecode.io/api/packages/388414?format=json","purl":"pkg:composer/cakephp/cakephp@2.4.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-4nzp-mvbw-5kax"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yzq8-e9u1-3bbe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.4.0"},{"url":"http://public2.vulnerablecode.io/api/packages/401307?format=json","purl":"pkg:composer/cakephp/cakephp@2.4.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-4nzp-mvbw-5kax"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-8uvs-ff4c-gbf4"},{"vulnerability":"VCID-d5gm-79q5-hyg6"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-pndg-eaey-2ydk"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-ufhs-run3-kqag"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yrzx-r3q3-43ej"},{"vulnerability":"VCID-yzq8-e9u1-3bbe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.4.5"},{"url":"http://public2.vulnerablecode.io/api/packages/401308?format=json","purl":"pkg:composer/cakephp/cakephp@2.4.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-4nzp-mvbw-5kax"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-8uvs-ff4c-gbf4"},{"vulnerability":"VCID-d5gm-79q5-hyg6"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-pndg-eaey-2ydk"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-ufhs-run3-kqag"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yrzx-r3q3-43ej"},{"vulnerability":"VCID-yzq8-e9u1-3bbe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.4.6"},{"url":"http://public2.vulnerablecode.io/api/packages/401309?format=json","purl":"pkg:composer/cakephp/cakephp@2.4.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-4nzp-mvbw-5kax"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-8uvs-ff4c-gbf4"},{"vulnerability":"VCID-d5gm-79q5-hyg6"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-pndg-eaey-2ydk"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-ufhs-run3-kqag"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yrzx-r3q3-43ej"},{"vulnerability":"VCID-yzq8-e9u1-3bbe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.4.7"},{"url":"http://public2.vulnerablecode.io/api/packages/379959?format=json","purl":"pkg:composer/cakephp/cakephp@2.4.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-4nzp-mvbw-5kax"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-pndg-eaey-2ydk"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-ufhs-run3-kqag"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yrzx-r3q3-43ej"},{"vulnerability":"VCID-yzq8-e9u1-3bbe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.4.8"},{"url":"http://public2.vulnerablecode.io/api/packages/404337?format=json","purl":"pkg:composer/cakephp/cakephp@2.4.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-4nzp-mvbw-5kax"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-pndg-eaey-2ydk"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-ufhs-run3-kqag"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yrzx-r3q3-43ej"},{"vulnerability":"VCID-yzq8-e9u1-3bbe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.4.9"},{"url":"http://public2.vulnerablecode.io/api/packages/404338?format=json","purl":"pkg:composer/cakephp/cakephp@2.4.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-4nzp-mvbw-5kax"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-pndg-eaey-2ydk"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-ufhs-run3-kqag"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yrzx-r3q3-43ej"},{"vulnerability":"VCID-yzq8-e9u1-3bbe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.4.10"},{"url":"http://public2.vulnerablecode.io/api/packages/388415?format=json","purl":"pkg:composer/cakephp/cakephp@2.5.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-4nzp-mvbw-5kax"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-pndg-eaey-2ydk"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-ufhs-run3-kqag"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yrzx-r3q3-43ej"},{"vulnerability":"VCID-yzq8-e9u1-3bbe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.0"},{"url":"http://public2.vulnerablecode.io/api/packages/404339?format=json","purl":"pkg:composer/cakephp/cakephp@2.5.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-4nzp-mvbw-5kax"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-pndg-eaey-2ydk"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-ufhs-run3-kqag"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yrzx-r3q3-43ej"},{"vulnerability":"VCID-yzq8-e9u1-3bbe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.1"},{"url":"http://public2.vulnerablecode.io/api/packages/404340?format=json","purl":"pkg:composer/cakephp/cakephp@2.5.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-4nzp-mvbw-5kax"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-pndg-eaey-2ydk"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-ufhs-run3-kqag"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yrzx-r3q3-43ej"},{"vulnerability":"VCID-yzq8-e9u1-3bbe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.2"},{"url":"http://public2.vulnerablecode.io/api/packages/404341?format=json","purl":"pkg:composer/cakephp/cakephp@2.5.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-4nzp-mvbw-5kax"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-pndg-eaey-2ydk"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-ufhs-run3-kqag"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yrzx-r3q3-43ej"},{"vulnerability":"VCID-yzq8-e9u1-3bbe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.3"},{"url":"http://public2.vulnerablecode.io/api/packages/404342?format=json","purl":"pkg:composer/cakephp/cakephp@2.5.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-4nzp-mvbw-5kax"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-pndg-eaey-2ydk"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-ufhs-run3-kqag"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yrzx-r3q3-43ej"},{"vulnerability":"VCID-yzq8-e9u1-3bbe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.4"},{"url":"http://public2.vulnerablecode.io/api/packages/404343?format=json","purl":"pkg:composer/cakephp/cakephp@2.5.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-4nzp-mvbw-5kax"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-pndg-eaey-2ydk"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-ufhs-run3-kqag"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yrzx-r3q3-43ej"},{"vulnerability":"VCID-yzq8-e9u1-3bbe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.5"},{"url":"http://public2.vulnerablecode.io/api/packages/404344?format=json","purl":"pkg:composer/cakephp/cakephp@2.5.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-4nzp-mvbw-5kax"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-pndg-eaey-2ydk"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-ufhs-run3-kqag"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yrzx-r3q3-43ej"},{"vulnerability":"VCID-yzq8-e9u1-3bbe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.6"},{"url":"http://public2.vulnerablecode.io/api/packages/404345?format=json","purl":"pkg:composer/cakephp/cakephp@2.5.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-4nzp-mvbw-5kax"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-pndg-eaey-2ydk"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-ufhs-run3-kqag"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yrzx-r3q3-43ej"},{"vulnerability":"VCID-yzq8-e9u1-3bbe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.7"},{"url":"http://public2.vulnerablecode.io/api/packages/404346?format=json","purl":"pkg:composer/cakephp/cakephp@2.5.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-4nzp-mvbw-5kax"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-pndg-eaey-2ydk"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-ufhs-run3-kqag"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yrzx-r3q3-43ej"},{"vulnerability":"VCID-yzq8-e9u1-3bbe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.5.8"},{"url":"http://public2.vulnerablecode.io/api/packages/388416?format=json","purl":"pkg:composer/cakephp/cakephp@2.6.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-4nzp-mvbw-5kax"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-pndg-eaey-2ydk"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-ufhs-run3-kqag"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yrzx-r3q3-43ej"},{"vulnerability":"VCID-yzq8-e9u1-3bbe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.0"},{"url":"http://public2.vulnerablecode.io/api/packages/404348?format=json","purl":"pkg:composer/cakephp/cakephp@2.6.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-4nzp-mvbw-5kax"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-pndg-eaey-2ydk"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-ufhs-run3-kqag"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yrzx-r3q3-43ej"},{"vulnerability":"VCID-yzq8-e9u1-3bbe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.1"},{"url":"http://public2.vulnerablecode.io/api/packages/404349?format=json","purl":"pkg:composer/cakephp/cakephp@2.6.2","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-4nzp-mvbw-5kax"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-pndg-eaey-2ydk"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-ufhs-run3-kqag"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yrzx-r3q3-43ej"},{"vulnerability":"VCID-yzq8-e9u1-3bbe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.2"},{"url":"http://public2.vulnerablecode.io/api/packages/404350?format=json","purl":"pkg:composer/cakephp/cakephp@2.6.3","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-4nzp-mvbw-5kax"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-pndg-eaey-2ydk"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-ufhs-run3-kqag"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yrzx-r3q3-43ej"},{"vulnerability":"VCID-yzq8-e9u1-3bbe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.3"},{"url":"http://public2.vulnerablecode.io/api/packages/404351?format=json","purl":"pkg:composer/cakephp/cakephp@2.6.4","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-4nzp-mvbw-5kax"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-pndg-eaey-2ydk"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-ufhs-run3-kqag"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yrzx-r3q3-43ej"},{"vulnerability":"VCID-yzq8-e9u1-3bbe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.4"},{"url":"http://public2.vulnerablecode.io/api/packages/404352?format=json","purl":"pkg:composer/cakephp/cakephp@2.6.5","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-4nzp-mvbw-5kax"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-pndg-eaey-2ydk"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-ufhs-run3-kqag"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yrzx-r3q3-43ej"},{"vulnerability":"VCID-yzq8-e9u1-3bbe"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.5"},{"url":"http://public2.vulnerablecode.io/api/packages/379969?format=json","purl":"pkg:composer/cakephp/cakephp@2.6.6","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-pndg-eaey-2ydk"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-ufhs-run3-kqag"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yrzx-r3q3-43ej"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.6"},{"url":"http://public2.vulnerablecode.io/api/packages/404582?format=json","purl":"pkg:composer/cakephp/cakephp@2.6.7","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-pndg-eaey-2ydk"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-ufhs-run3-kqag"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yrzx-r3q3-43ej"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.7"},{"url":"http://public2.vulnerablecode.io/api/packages/404583?format=json","purl":"pkg:composer/cakephp/cakephp@2.6.8","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-pndg-eaey-2ydk"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-ufhs-run3-kqag"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yrzx-r3q3-43ej"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.8"},{"url":"http://public2.vulnerablecode.io/api/packages/404584?format=json","purl":"pkg:composer/cakephp/cakephp@2.6.9","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-pndg-eaey-2ydk"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-ufhs-run3-kqag"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yrzx-r3q3-43ej"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.9"},{"url":"http://public2.vulnerablecode.io/api/packages/404585?format=json","purl":"pkg:composer/cakephp/cakephp@2.6.10","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-pndg-eaey-2ydk"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-ufhs-run3-kqag"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yrzx-r3q3-43ej"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.6.10"},{"url":"http://public2.vulnerablecode.io/api/packages/388433?format=json","purl":"pkg:composer/cakephp/cakephp@2.7.0","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-pndg-eaey-2ydk"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-ufhs-run3-kqag"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yrzx-r3q3-43ej"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.7.0"},{"url":"http://public2.vulnerablecode.io/api/packages/404587?format=json","purl":"pkg:composer/cakephp/cakephp@2.7.1","is_vulnerable":true,"affected_by_vulnerabilities":[{"vulnerability":"VCID-251n-1k53-57dd"},{"vulnerability":"VCID-3cx6-dpsf-xkhw"},{"vulnerability":"VCID-74cw-ufme-5yfh"},{"vulnerability":"VCID-nsq5-7j7c-hbak"},{"vulnerability":"VCID-pjc3-66nj-mqe6"},{"vulnerability":"VCID-pndg-eaey-2ydk"},{"vulnerability":"VCID-tuaz-rx17-huc6"},{"vulnerability":"VCID-ufhs-run3-kqag"},{"vulnerability":"VCID-v1q2-grgw-2fg2"},{"vulnerability":"VCID-yrzx-r3q3-43ej"}],"resource_url":"http://public2.vulnerablecode.io/packages/pkg:composer/cakephp/cakephp@2.7.1"}],"references":[{"reference_url":"https://bakery.cakephp.org/2015/08/06/cakephp_2_5_9_2_6_10_2_7_2_released.html","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://bakery.cakephp.org/2015/08/06/cakephp_2_5_9_2_6_10_2_7_2_released.html"},{"reference_url":"https://github.com/cakephp/cakephp","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/cakephp/cakephp"},{"reference_url":"https://github.com/cakephp/cakephp/commit/056f24a77428ad35e23cab6840a72b7c25c4ccc0","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/cakephp/cakephp/commit/056f24a77428ad35e23cab6840a72b7c25c4ccc0"},{"reference_url":"https://github.com/cakephp/cakephp/releases/tag/2.5.9","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/cakephp/cakephp/releases/tag/2.5.9"},{"reference_url":"https://github.com/cakephp/cakephp/releases/tag/2.6.11","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/cakephp/cakephp/releases/tag/2.6.11"},{"reference_url":"https://github.com/cakephp/cakephp/releases/tag/2.7.2","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/cakephp/cakephp/releases/tag/2.7.2"},{"reference_url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/cakephp/cakephp/2015-08-06.yaml","reference_id":"","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"generic_textual","scoring_elements":""}],"url":"https://github.com/FriendsOfPHP/security-advisories/blob/master/cakephp/cakephp/2015-08-06.yaml"},{"reference_url":"https://github.com/advisories/GHSA-6hg4-vp5q-47mw","reference_id":"GHSA-6hg4-vp5q-47mw","reference_type":"","scores":[{"value":"MODERATE","scoring_system":"cvssv3.1_qr","scoring_elements":""}],"url":"https://github.com/advisories/GHSA-6hg4-vp5q-47mw"}],"weaknesses":[{"cwe_id":1035,"name":"OWASP Top Ten 2017 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2017."},{"cwe_id":937,"name":"OWASP Top Ten 2013 Category A9 - Using Components with Known Vulnerabilities","description":"Weaknesses in this category are related to the A9 category in the OWASP Top Ten 2013."}],"exploits":[],"severity_range_score":"4.0 - 6.9","exploitability":"0.5","weighted_severity":"6.2","risk_score":3.1,"resource_url":"http://public2.vulnerablecode.io/vulnerabilities/VCID-v1q2-grgw-2fg2"}