CakePHP 5.4.3以前にSQLインジェクションの脆弱性
Summary
CakePHP 5.4.3以前に、ウィンドウ関数の指定へユーザー入力を渡すアプリでSQLを実行される脆弱性が公表されました。使っている版と該当する実装の有無を調べ、修正版へ更新してください。
AI summary
Written by an external AI model and may contain mistakes. Check the original description and references below before acting on it.
CakePHP 5.4.3以前に、ウィンドウ関数の指定へユーザー入力を渡すアプリでSQLを実行される脆弱性が公表されました。使っている版と該当する実装の有無を調べ、修正版へ更新してください。
Affected packages
| Ecosystem | Package | Affected | Fixed |
|---|---|---|---|
| cakephp | cakephp |
≤ 5.4.3 |
— |
Original description The description as published by the source.
CakePHP through 5.4.3 contains an sql injection vulnerability that allows attackers to inject SQL by supplying unvalidated frame offsets and directions to WindowExpression::range() and frame(). Attackers can pass crafted values through applications forwarding user input into the OVER clause to execute SQL with the database connection's privileges.
Source: CVE.org (CVE Program・cvelistV5) NVD GitHub Advisory
References
- advisory abraxaslabs.tech
- advisory vulncheck.com
- advisory nvd.nist.gov
- advisory github.com
- package github.com
- patch github.com
- patch github.com
- patch github.com
- patch github.com
- web github.com
- web github.com
- web github.com