CVE-2023-22727
CRITICAL9.8EPSS 0.93%CakePHP Database\\Query::offset() and limit() methods are vulnerable to SQL injection
發布日:2023/1/20修改日:2023/11/8
描述
### Impact The `Cake\Database\Query::limit()` and `Cake\Database\Query::offset()` methods are vulnerable to SQL injection if passed un-sanitized user request data. ### Patches This issue has been fixed in 4.2.12, 4.3.11, 4.4.10 ### Workarounds Using CakePHP's Pagination library will mitigate this issue, as will validating or casting parameters to these methods. ### References https://bakery.cakephp.org/2023/01/06/cakephp_4211_4311_4410_released.html
受影響套件(3)
- Debian/cakephpfrom 0
- Packagist/cakephp/cakephp>= 4.2.0, < 4.2.12
- Packagist/cakephp/database>= 4.2.0, < 4.2.12
CVSS 分數
| 來源 | 版本 | 嚴重程度 | 向量 |
|---|---|---|---|
| osv | CVSS 3.1 | CRITICAL9.8 | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H |
參考連結(6)
- ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2023-22727
- ADVISORYhttps://security-tracker.debian.org/tracker/CVE-2023-22727
- PATCHhttps://github.com/cakephp/cakephp
- WEBhttps://bakery.cakephp.org/2023/01/06/cakephp_4211_4311_4410_released.html
- WEBhttps://github.com/cakephp/cakephp/commit/3f463e7084b5a15e67205ced3a622577cca7a239
- WEBhttps://github.com/cakephp/cakephp/security/advisories/GHSA-6g8q-qfpv-57wp