CVE-2020-15400

CakePHP before 4.0.6 mishandles CSRF token generation

published June 30, 2020

CVSS
—
EPSS
0%
Percentile
37.8
In the wild
Unconfirmed
What it is

CakePHP before 4.0.6 mishandles CSRF token generation. This might be remotely exploitable in conjunction with XSS.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.00446 · 37.8th percentile
Published
2020-06-30T11:42Z
EPSS history
Timeline
  • 30 JUN 11:42Z
    CakePHP before 4.0.6 mishandles CSRF token generation
    cvelistv5