CakePHP 3.2.0 CSRF Bypass

Discussion in 'News Aggregator' started by Packet Storm, 20 Jan 2016.

  1. Packet Storm

    Packet Storm Guest

    CakePHP versions 3.2.0 and below suffer from a _method cross site request forgery protection bypass vulnerability.

    Continue reading...
     

Share This Page

Loading...