CakePHP 2.x and 3.x before 3.1.5 might allow remote attackers to bypass the CSRF protection mechanism via the _method parameter.
References
Configurations
Configuration 1 (hide)
|
Information
Published : 2016-01-26 11:59
Updated : 2018-10-09 12:58
NVD link : CVE-2015-8379
Mitre link : CVE-2015-8379
JSON object : View
CWE
CWE-352
Cross-Site Request Forgery (CSRF)
Products Affected
cakephp
- cakephp