Debian 9859 Published by

A cakephp update has been released for Debian 6 LTS



Package : cakephp
Version : 1.3.2-1.1+deb6u11

CakePHP, an open-source web application framework for PHP, was
vulnerable to SSRF (Server Side
Request Forgery) attacks. Remote attacker can utilize it for at least
DoS (Denial of Service) attacks, if the target application accepts XML
as an input. It is caused by insecure design of Cake's Xml class.

For Debian 6 Squeeze, this issue has been fixed in cakephp version
1.3.2-1.1+deb6u11.