CVE-2022-25319

Description

An issue was discovered in Cerebrate through 1.4. Endpoints could be open even when not enabled.

Affected Platforms

Weakness Type

NVD-CWE-noinfo

References

• https://github.com/cerebrate-project/cerebrate/commit/a2632349175e574cd6305fa459…
• https://zigrin.com/advisories/cerebrate-endpoints-could-be-open-when-not-enabled…
• https://zigrin.com/cakephp-application-cybersecurity-research-forgotten-endpoint…
• https://github.com/cerebrate-project/cerebrate/commit/a2632349175e574cd6305fa459…
• https://zigrin.com/advisories/cerebrate-endpoints-could-be-open-when-not-enabled…
• https://zigrin.com/cakephp-application-cybersecurity-research-forgotten-endpoint…