Cross-Site Request Forgery

Every one of the 2 is a mark on the map. Named now: 1 to 2, most at risk first.

1. CakePHP 2.x and 3.x before 3.1.5 might allow remote attackers to bypass the CSRF protection mechanism via the _method parameter.CVE-2015-8379Cakephp · 1.5% likely

   CWE-352

2. A vulnerability exists in CakePHP versions 4.0.x through 4.1.3. The CsrfProtectionMiddleware component allows method override parameters to bypass CSRF checks by changing the HTTP…CVE-2020-35239Cakephp · 0.6% likely

   CWE-352

exploited in the wildcheck availableringed, named or not: CyberSIXT has reported on it

Zoom in on the map and the dots under the middle of it are named where they are.