CakePHP before 4.0.6 mishandles CSRF... CVE-2020-15400

- AV AC AU C I A
发布: 2020-06-30
修订: 2020-07-16

CakePHP before 4.0.6 mishandles CSRF token generation. This might be remotely exploitable in conjunction with XSS.

0%
暂无可用Exp或PoC
产品及版本信息(CPE)暂不可用