CVE-2023-22727 - CVE House
Back to Database
Status published Critical CVE-2023-22727

Database Query::offset() and limit() vulnerable to SQL injection in cakephp

Vulnerability Description

CakePHP is a development framework for PHP web apps. In affected versions the `Cake\Database\Query::limit()` and `Cake\Database\Query::offset()` methods are vulnerable to SQL injection if passed un-sanitized user request data. This issue has been fixed in 4.2.12, 4.3.11, 4.4.10. Users are advised to upgrade. Users unable to upgrade may mitigate this issue by using CakePHP's Pagination library. Manually validating or casting parameters to these methods will also mitigate the issue.

Impact Analysis

Refer to official advisory for detailed impact metrics.

Remediation

Ensure systems are updated to the latest vendor-supplied patch levels.

THREAT MONITOR

Am I Vulnerable?

Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2023-22727

Credits & Attribution

No credits recorded in the NVD database.

References

More from cakephp

View All →
CVE-2020-35239
A vulnerability exists in CakePHP versions 4.0.x through 4.1.3. The...
High 8.8
CVE-2019-11458
An issue was discovered in SmtpTransport in CakePHP 3.7.6. An...
High 7.5
CVE-2016-4793
The clientIp function in CakePHP 3.2.4 and earlier allows remote...
High 7.5
CVE-2015-8379
CakePHP 2.x and 3.x before 3.1.5 might allow remote attackers...
High 8.8
CVE-2011-3712
CakePHP 1.3.7 allows remote attackers to obtain sensitive information via...
Medium 5

Affected Vendor

Affected Software

cakephp
Vulnerable Versions:
>= 4.2.0, < 4.2.12, >= 4.3.0, < 4.3.11, >= 4.4.0, < 4.4.10

Timeline

Official Publish: January 17th, 2023
Last Modified: March 10th, 2025
Added to House: July 22nd, 2026

CVSS Vectors

V3: CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Weaknesses (CWE)

CWE-89

MITRE ATT&CK TTPs

T1190 Exploit Public-Facing Application
Initial Access
T1059 Command and Scripting Interpreter
Execution
T1213.006 Databases
Collection
T1485 Data Destruction
Impact