Predictive Vulnerability Intelligence.

Product

  • Product
  • Pricing
  • Documentation

Company

  • About
  • Partnerships
  • Blog
  • Support

Legal

  • Terms
  • Privacy
  • Data Licensing

© 2026 FAUCET Technologies LLC. All rights reserved.

CVE-2023-22727

31
FAUCET Score

CVE-2023-22727 is a critical SQL injection vulnerability affecting CakePHP versions prior to 4.2.12, 4.3.11, and 4.4.10. Specifically, the Cake\Database\Query::limit() and Cake\Database\Query::offset() methods are susceptible if unsanitized user input is passed. This vulnerability carries a CVSS score of 9.8 (Critical), indicating a severe risk with a network attack vector, low attack complexity, and high potential for compromise of confidentiality, integrity, and availability. There is currently no evidence of active exploitation, public exploit code (Metasploit, Nuclei, ExploitDB), or significant community discussion surrounding this CVE.

Impacted Technologies

VendorProductVersion(s)CPE
>= 4.2.0, < 4.2.12CPE matchmatch criteria
cpe:2.3:a:cakephp:cakephp:*:*:*:*:*:*:*:*
>= 4.3.0, < 4.3.11CPE matchmatch criteria
cpe:2.3:a:cakephp:cakephp:*:*:*:*:*:*:*:*
>= 4.4.0, < 4.4.10CPE matchmatch criteria
cpe:2.3:a:cakephp:cakephp:*:*:*:*:*:*:*:*

CVSS Data

CVSS version used by this source: 3.1

9.8CRITICAL

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
HIGH
Availability Impact
HIGH
Exploitability Score
3.9
Impact Score
5.9
CvssVersion
3.1

Exploit Intelligence

EPSS Score
0.86%
Probability of exploitation in next 30 days
EPSS Percentile
54.7%
Percentile rank of EPSS score among Peer Group
As of 2026-07-27
Model: v2026.06.15
This CVE's current EPSS score of 0.0086 is in the 39th percentile among its peer group of 36,862 CVEs.

Social Chatter

The average CVE in this peer group has 0.0 Twitter, 0.1 Reddit, 0.3 Bluesky, 0.3 Mastodon, and 2.4 GitHub mentions.

Media Mentions

No media coverage found for this CVE.

The average CVE in this peer group has 0.3 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.

Remediation

Patch Available

Vendor Patches (7)

composerpatch availablevia ghsa
Product: cakephp/cakephpFixed in: 4.2.12
composerpatch availablevia ghsa
Product: cakephp/cakephpFixed in: 4.3.11
composerpatch availablevia ghsa
Product: cakephp/cakephpFixed in: 4.4.10
composerpatch availablevia ghsa
Product: cakephp/databaseFixed in: 4.2.12
composerpatch availablevia ghsa
Product: cakephp/databaseFixed in: 4.3.11
composerpatch availablevia ghsa
Product: cakephp/databaseFixed in: 4.4.10
github_advisorypatch availablevia nvd_reference
View patch

Vendor Advisories (1)

composerGHSA-6g8q-qfpv-57wpcritical

CakePHP Database\\Query::offset() and limit() methods are vulnerable to SQL injection

Jan 20, 2023

References

bakery.cakephp.org / 2023/01/06/cakephp_4211_4311_4410_released.html
Release NotesVendor Advisory
github.com / cakephp/cakephp/commit/3f463e7084b5a15e67205ced3a622577cca7a239
PatchThird Party Advisory
github.com / cakephp/cakephp/security/advisories/GHSA-6g8q-qfpv-57wp
Third Party Advisory