CVE-2019-11458

Published May 8th, 2019

View on NVD ↗

CVSS v3

N/A

CVSS v2

6.4

MEDIUM

Affected

PROJECT

Description

An issue was discovered in SmtpTransport in CakePHP 3.7.6. An unserialized object with modified internal properties can trigger arbitrary file overwriting upon destruction.

cakephp/cakephp

CakePHP: The Rapid Development Framework for PHP - Official Repository

GitHub

8.8K