CakePHP FunctionsBuilder SQL Injection (CVE-2025-79752, CWE-89)
Security Advisory
CVE-2025-79752
High
CakePHP
Affected:
- cakephp/cakephp <4.5.12
- cakephp/cakephp >=4.6.0,<4.6.5
- cakephp/cakephp >=5.0.0,<5.1.9
- cakephp/cakephp >=5.2.0,<5.2.14
- cakephp/cakephp >=5.3.0,<5.3.7
Fixed in:
- 4.5.12
- 4.6.5
- 5.1.9
- 5.2.14
- 5.3.7
Referenced CVEs:
CVE-2026-79752 · 9.2
文章内图片已隐藏以节省流量 · Upgrade to Pro to view images & offline archive
This content was auto-fetched from github.com, cleaned by our LLM pipeline, and translated to English. View original.