CVE-2023-22727

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2023-22727
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-22727.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2023-22727
Aliases
Downstream
Published
2023-01-17T20:41:10.143Z
Modified
2025-12-04T23:38:06.455094Z
Severity
  • 9.8 (Critical) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H CVSS Calculator
Summary
Database Query::offset() and limit() vulnerable to SQL injection in cakephp
Details

CakePHP is a development framework for PHP web apps. In affected versions the Cake\Database\Query::limit() and Cake\Database\Query::offset() methods are vulnerable to SQL injection if passed un-sanitized user request data. This issue has been fixed in 4.2.12, 4.3.11, 4.4.10. Users are advised to upgrade. Users unable to upgrade may mitigate this issue by using CakePHP's Pagination library. Manually validating or casting parameters to these methods will also mitigate the issue.

Database specific 
{
    "cwe_ids": [
        "CWE-89"
    ],
    "cna_assigner": "GitHub_M",
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/22xxx/CVE-2023-22727.json"
}
References

Affected packages

Git / github.com/cakephp/cakephp

Affected ranges

Type
GIT
Repo
https://github.com/cakephp/cakephp
Events
Introduced
d4b68a6dd2404d0b8cc7431838a39ec44b3f5f6b
Fixed
aa72cbb047431ab6bfb92e66a5a6d3382ab2385f
Database specific 
{
    "versions": [
        {
            "introduced": "4.2.0"
        },
        {
            "fixed": "4.2.12"
        }
    ]
}
Type
GIT
Repo
https://github.com/cakephp/cakephp
Events
Introduced
fc71c2d7e1bda979da41ed1dea726d6e04240d3b
Fixed
47177366fc9131a58a518e99f732e98a8a4854ac
Database specific 
{
    "versions": [
        {
            "introduced": "4.3.0"
        },
        {
            "fixed": "4.3.11"
        }
    ]
}
Type
GIT
Repo
https://github.com/cakephp/cakephp
Events
Introduced
f43b3f58680ae869fb2e9fa56e65406cd1250702
Fixed
3b089816d7cae4cff0a2a4de3e1ee651f73979df
Database specific 
{
    "versions": [
        {
            "introduced": "4.4.0"
        },
        {
            "fixed": "4.4.10"
        }
    ]
}

Affected versions

4.*
4.4.0
4.4.1
4.4.2
4.4.3
4.4.4
4.4.5
4.4.6
4.4.7
4.4.8
4.4.9

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2023-22727.json"