p PatchFirst

CVE-2015-5723

CVE-2015-5723

This page contains facts from public vulnerability sources. Check the original advisory before updating.

This page shows selected source facts. See the linked advisories for the complete description and affected versions.

Doctrine Annotations before 1.2.7, Cache before 1.3.2 and 1.4.x before 1.4.2, Common before 2.4.3 and 2.5.x before 2.5.1, ORM before 2.4.8 or 2.5.x before 2.5.1, MongoDB ODM before 1.0.2, and MongoDB ODM Bundle before 3.0.1 use world-writable permissions for cache directories, which allows local users to execute arbitrary PHP code with additional privileges by leveraging an application with the umask set to 0 and that executes cache entries as code.

CVSS 7.8 · High · EPSS 0.4% · Fix available

Published
Updated

Stack: system · php

Affected products and versions

  • n/a

    Versions
    • n/a: Affected

    No fix published

  • doctrine Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.4.8-1

    Update to 2.4.8-1

  • doctrine Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.4.8-1

    Update to 2.4.8-1

  • doctrine Debian:14

    Affected ranges
    • ECOSYSTEM: < 2.4.8-1

    Update to 2.4.8-1

  • php-doctrine-annotations Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.2.7-1

    Update to 1.2.7-1

  • php-doctrine-annotations Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.2.7-1

    Update to 1.2.7-1

  • php-doctrine-annotations Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.2.7-1

    Update to 1.2.7-1

  • php-doctrine-cache Debian:12

    Affected ranges
    • ECOSYSTEM: < 1.4.2-1

    Update to 1.4.2-1

  • php-doctrine-cache Debian:13

    Affected ranges
    • ECOSYSTEM: < 1.4.2-1

    Update to 1.4.2-1

  • php-doctrine-cache Debian:14

    Affected ranges
    • ECOSYSTEM: < 1.4.2-1

    Update to 1.4.2-1

  • php-doctrine-common Debian:12

    Affected ranges
    • ECOSYSTEM: < 2.4.3-1

    Update to 2.4.3-1

  • php-doctrine-common Debian:13

    Affected ranges
    • ECOSYSTEM: < 2.4.3-1

    Update to 2.4.3-1

  • doctrine/annotations Packagist

    Versions
    • v1.0
    • v1.1
    • v1.1.1
    • v1.1.2
    • v1.2.0
    • v1.2.1
    • v1.2.2
    • v1.2.3
    • v1.2.4
    • v1.2.5
    • v1.2.6
    Affected ranges
    • ECOSYSTEM: < 1.2.7

    Update to 1.2.7

  • doctrine/cache Packagist

    Versions
    • v1.4.0
    • v1.4.1
    Affected ranges
    • ECOSYSTEM: ≥ 1.4.0, < 1.4.2

    Update to 1.4.2

  • doctrine/common Packagist

    Versions
    • 2.1.3
    • 2.1.4
    • 2.2.0
    • 2.2.0-RC1
    • 2.2.0-RC3
    • 2.2.0-RC4
    • 2.2.0-RC5
    • 2.2.0BETA1
    • 2.2.0BETA2
    • 2.2.1
    • 2.2.2
    • 2.2.3
    • 2.3.0
    • 2.3.0-BETA1
    • 2.3.0-RC1
    • 2.3.0-RC2
    • 2.3.0-RC3
    • 2.4.0-RC1
    • 2.4.0-RC2
    • 2.4.0-RC3
    • 2.4.0-RC4
    • v2.4.0
    • v2.4.1
    • v2.4.2
    Affected ranges
    • ECOSYSTEM: < 2.4.3

    Update to 2.4.3

  • doctrine/common Packagist

    Versions
    • v2.5.0
    • v2.5.0-beta1
    Affected ranges
    • ECOSYSTEM: ≥ 2.5.0-stable, < 2.5.1

    Update to 2.5.1

  • doctrine/orm Packagist

    Versions
    • v2.5.0
    Affected ranges
    • ECOSYSTEM: ≥ 2.5.0, < 2.5.1

    Update to 2.5.1

  • doctrine/mongodb-odm Packagist

    Versions
    • 1.0.0
    • 1.0.0-BETA10
    • 1.0.0-BETA11
    • 1.0.0-BETA12
    • 1.0.0-BETA13
    • 1.0.0-BETA4
    • 1.0.0-BETA5
    • 1.0.0-BETA6
    • 1.0.0-BETA7
    • 1.0.0-BETA8
    • 1.0.0-BETA9
    • 1.0.1
    Affected ranges
    • ECOSYSTEM: < 1.0.2

    Update to 1.0.2

  • doctrine/mongodb-odm-bundle Packagist

    Versions
    • v2.0.1
    • v2.1.0
    • v2.2.0
    • v2.2.1
    • v3.0.0
    • v3.0.0-BETA1
    • v3.0.0-BETA2
    • v3.0.0-BETA3
    • v3.0.0-BETA4
    • v3.0.0-BETA5
    • v3.0.0-BETA6
    Affected ranges
    • ECOSYSTEM: < 3.0.1

    Update to 3.0.1

  • zendframework/zendframework1 Packagist

    Versions
    • 1.12.0
    • 1.12.1
    • 1.12.10
    • 1.12.11
    • 1.12.12
    • 1.12.13
    • 1.12.14
    • 1.12.15
    • 1.12.2
    • 1.12.3
    • 1.12.4
    • 1.12.5
    • 1.12.6
    • 1.12.7
    • 1.12.8
    • 1.12.9
    Affected ranges
    • ECOSYSTEM: ≥ 1.12.0, < 1.12.16

    Update to 1.12.16

  • zendframework/zend-cache Packagist

    Versions
    • 2.5.0
    • 2.5.1
    • 2.5.2
    Affected ranges
    • ECOSYSTEM: ≥ 2.5.0, < 2.5.3

    Update to 2.5.3

  • aws/aws-sdk-php Packagist

    Versions
    • 3.0.0
    • 3.0.1
    • 3.0.2
    • 3.0.3
    • 3.0.4
    • 3.0.5
    • 3.0.6
    • 3.0.7
    • 3.1.0
    • 3.2.0
    Affected ranges
    • ECOSYSTEM: ≥ 3.0.0, < 3.2.1

    Update to 3.2.1

  • doctrine/cache Packagist

    Versions
    • v1.1
    • v1.2.0
    • v1.3.0
    • v1.3.1
    Affected ranges
    • ECOSYSTEM: ≥ 1.0.0, < 1.3.2

    Update to 1.3.2

  • zendframework/zend-cache Packagist

    Versions
    • 2.4.0
    • 2.4.1
    • 2.4.2
    • 2.4.3
    • 2.4.4
    • 2.4.5
    • 2.4.6
    • 2.4.7
    Affected ranges
    • ECOSYSTEM: ≥ 2.4.0, < 2.4.8

    Update to 2.4.8

Original sources

Check your server →