~ / search / GHSA-6g8q-qfpv-57wp

GHSA-6g8q-qfpv-57wp

CakePHP Database\\Query::offset() and limit() methods are vulnerable to SQL injection

Source: GitHub Advisory Database (reviewed) Critical CVE-2023-22727

Packages

EcosystemPackageAffectedFixed in
Packagist cakephp/cakephp >= 4.2.0, < 4.2.12 4.2.12
Packagist cakephp/cakephp >= 4.3.0, < 4.3.11 4.3.11
Packagist cakephp/cakephp >= 4.4.0, < 4.4.10 4.4.10
Packagist cakephp/database >= 4.2.0, < 4.2.12 4.2.12
Packagist cakephp/database >= 4.3.0, < 4.3.11 4.3.11
Packagist cakephp/database >= 4.4.0, < 4.4.10 4.4.10

Details

As written in the advisory (Markdown source, shown as plain text).

### Impact The `Cake\Database\Query::limit()` and `Cake\Database\Query::offset()` methods are vulnerable to SQL injection if passed un-sanitized user request data. ### Patches This issue has been fixed in 4.2.12, 4.3.11, 4.4.10 ### Workarounds Using CakePHP's Pagination library will mitigate this issue, as will validating or casting parameters to these methods. ### References https://bakery.cakephp.org/2023/01/06/cakephp_4211_4311_4410_released.html

References

External links from the advisory. They lead to third-party sites.