Cakefoundation Cakephp vulnerabilities

• cakefoundation cakephp Cross-Site Request Forgery in CakePHP CVE-2020-15400 Fix available 4.3 MediumJune 30, 2020
• cakefoundation cakephp CakePHPallows remote attackers to read arbitrary files via XML data containing external entity references CVE-2012-4399 Public exploitFix available EPSS 12.1% 7.5 HighOctober 9, 2012
• cakefoundation cakephp CakePHP allows remote attackers to modify internal Cake cache and execute arbitrary code CVE-2010-4335 Public exploitFix available EPSS 55.2% 7.5 HighJanuary 14, 2011