CVE-2023-22727

CriticalCVSS 9.8/10Last modified Jun 17, 2026

Description

CakePHP is a development framework for PHP web apps. In affected versions the `Cake\Database\Query::limit()` and `Cake\Database\Query::offset()` methods are vulnerable to SQL injection if passed un-sanitized user request data. This issue has been fixed in 4.2.12, 4.3.11, 4.4.10. Users are advised to upgrade. Users unable to upgrade may mitigate this issue by using CakePHP's Pagination library. Manually validating or casting parameters to these methods will also mitigate the issue.

Metrics

CVSS 3.1 9.8/10CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weakness enumeration

CWE-89

Affected software

Vendor	Product	Versions
cakephp	cakephp	>= 4.2.0, < 4.2.12; >= 4.3.0, < 4.3.11; >= 4.4.0, < 4.4.10

References

https://bakery.cakephp.org/2023/01/06/cakephp_4211_4311_4410_released.htmlRelease Notes, Vendor Advisory
https://github.com/cakephp/cakephp/commit/3f463e7084b5a15e67205ced3a622577cca7a239Patch, Third Party Advisory
https://github.com/cakephp/cakephp/security/advisories/GHSA-6g8q-qfpv-57wpThird Party Advisory
https://bakery.cakephp.org/2023/01/06/cakephp_4211_4311_4410_released.htmlRelease Notes, Vendor Advisory
https://github.com/cakephp/cakephp/commit/3f463e7084b5a15e67205ced3a622577cca7a239Patch, Third Party Advisory
https://github.com/cakephp/cakephp/security/advisories/GHSA-6g8q-qfpv-57wpThird Party Advisory

Timeline

Published: Jan 17, 2023
Last modified: Jun 17, 2026
NVD status: Modified

Related CVEs from 2023

CVE-2023-227284.3Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.CVE-2023-227296.1Silverstripe Framework is the Model-View-Controller framework that powers the Silverstripe content management system. Prior to version 4.12.CVE-2023-22737.5Rapid7 Insight Agent token handler versions 3.2.6 and below, suffer from a Directory Traversal vulnerability whereby unsanitized input from CVE-2023-227307.5Shopware is an open source commerce platform based on Symfony Framework and Vue js. In affected versions It was possible to put the same lin CVE-2023-227318.8Shopware is an open source commerce platform based on Symfony Framework and Vue js. In a Twig environment **without the Sandbox extension**,CVE-2023-227329.8Shopware is an open source commerce platform based on Symfony Framework and Vue js. The Administration session expiration was set to one wee CVE-2023-227336.5Shopware is an open source commerce platform based on Symfony Framework and Vue js. In affected versions the log module would write out all CVE-2023-227347.5Shopware is an open source commerce platform based on Symfony Framework and Vue js. The newsletter double opt-in validation was not checked CVE-2023-227354.6Zulip is an open-source team collaboration tool. In versions of zulip prior to commit `2f6c5a8` but after commit `04cf68b` users could uploa CVE-2023-227368.5Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Versions starting with 2.5.0-rc1 and above, prior to 2.5.8, and ve CVE-2023-227376.5wire-server provides back end services for Wire, a team communication and collaboration platform. Prior to version 2022-12-09, every member CVE-2023-227386.5vantage6 is a privacy preserving federated learning infrastructure for secure insight exchange. Assigning existing users to a different orga