Beveiligingsadvies

CVE-2026-55590

CVE-kwetsbaarheidsdetails - eXtreme Datacenter Security Operations

Gepubliceerd 2026-07-09 18:55:30

Laatst bijgewerkt 2026-07-09 19:18:12

Toegewezen door GitHub_M

CVSS-score 5.1

Status PUBLISHED

Beschrijving

CakePHP Authentication is an authentication plugin for CakePHP that can also be used in PSR-7 based applications. Prior to 2.11.1, 3.3.6, and 4.1.1, the getLoginRedirect() method contains a weakness to backslash bypasses that allows redirect targets with attacker-controlled hostnames through the redirect query string parameter. This issue is fixed in versions 2.11.1, 3.3.6, and 4.1.1.

← Alle CVE's bekijken Bekijk op cve.org ↗