CakePHP 3.2.0 CSRF Bypass

CakePHP versions 3.2.0 and below suffer from a _method cross site request forgery protection bypass vulnerability.

Leave a Reply