{"id":12900,"date":"2023-01-13T03:03:13","date_gmt":"2023-01-13T08:03:13","guid":{"rendered":"http:\/\/local.brightwhiz\/?p=12900"},"modified":"2023-01-13T03:03:15","modified_gmt":"2023-01-13T08:03:15","slug":"cakephp-4-4-10-release-announced","status":"publish","type":"post","link":"http:\/\/local.brightwhiz\/cakephp-4-4-10-release-announced\/","title":{"rendered":"CakePHP 4.4.10 Release now Available for Download"},"content":{"rendered":"\n
CakePHP 4.4.10 release security fixes has been announced for immediate availability by the core developer team.<\/p>\n\n\n\n
CakePHP is an open-source<\/a> web framework<\/a> written in PHP<\/a>. It follows the model\u2013view\u2013controller (MVC) software architectural pattern, and is used for developing web applications.<\/p>\n\n\n\n This release contain a security fix for the To get the full list of bug fixes you can check out the changelog here<\/a> to review every commit.<\/p>\n\n\n\nlimit()<\/code> and
offset()<\/code> methods of
Cake\\Database\\Query<\/code>. These patches fix some vulnerabilities such as if unfiltered request data is passed, these methods would allow for SQL injection. If the web application does not use CakePHP’s Pagination wrappers and directly passes request data into one of these methods the application vulnerability would be breached.<\/p>\n\n\n\n