CakePHP 2.x and 3.x before 3.1.5 might allow remote attackers to bypass the CSRF protection mechanism via the _method parameter.
                
            References
                    Configurations
                    Configuration 1 (hide)
| 
 | 
History
                    No history.
Information
                Published : 2016-01-26 19:59
Updated : 2025-04-12 10:46
NVD link : CVE-2015-8379
Mitre link : CVE-2015-8379
CVE.ORG link : CVE-2015-8379
JSON object : View
Products Affected
                cakephp
- cakephp
CWE
                
                    
                        
                        CWE-352
                        
            Cross-Site Request Forgery (CSRF)
