Security CakePHP 3.0.5 XML Class SSRF October 15, 2015 007admin Leave a comment CakePHP version 3.0.5 suffers from server-side request forgery attacks that can cause a denial of service condition.