Database Query::offset() and limit() vulnerable to SQL injection in cakephp
CVE-2023-22727
9.8CRITICAL
What is CVE-2023-22727?
The CakePHP framework has a vulnerability in its Query::limit() and Query::offset() methods, which can be exploited due to unsanitized user input. This flaw allows an attacker to manipulate SQL queries, leading to unauthorized access to sensitive information. The issue has been addressed in versions 4.2.12, 4.3.11, and 4.4.10, and users are strongly encouraged to upgrade their installations. For those unable to upgrade immediately, using the Pagination library or implementing manual validation of parameters can help mitigate the risks. Protect your application by staying informed and updating promptly.
Affected Version(s)
cakephp >= 4.2.0, < 4.2.12 < 4.2.0, 4.2.12
cakephp >= 4.3.0, < 4.3.11 < 4.3.0, 4.3.11
cakephp >= 4.4.0, < 4.4.10 < 4.4.0, 4.4.10