Doctrine Security Misconfiguration Vulnerability

🗓️ 17 May 2022 03:44:28Reported by GitHub Advisory DatabaseType

Doctrine security misconfiguration vulnerability in versions prior to 1.2.7, 1.3.2, 1.4.2, 2.4.3, 2.5.1, 2.4.8, and 1.0.2 allows local users to execute arbitrary PHP code with additional privileges

Reporter	Title	Published	Views	Family All 80
CNVD	Multiple Zend Products Local Lift Vulnerability	5 Nov 201500:00	–	cnvd
CVE	CVE-2015-5723	7 Jun 201614:00	–	cve
Cvelist	CVE-2015-5723	7 Jun 201614:00	–	cvelist
Debian	[SECURITY] [DSA 3369-1] zendframework security update	6 Oct 201521:31	–	debian
Debian CVE	CVE-2015-5723	7 Jun 201614:00	–	debiancve
Tenable Nessus	Debian DSA-3369-1 : zendframework - security update	7 Oct 201500:00	–	nessus
Tenable Nessus	Fedora 21 : php-doctrine-cache-1.4.2-1.fc21 (2015-15198)	15 Sep 201500:00	–	nessus
Tenable Nessus	Fedora 22 : php-doctrine-cache-1.4.2-1.fc22 (2015-15199)	15 Sep 201500:00	–	nessus
Tenable Nessus	Fedora 23 : php-doctrine-cache-1.4.2-1.fc23 (2015-15200)	21 Sep 201500:00	–	nessus
Tenable Nessus	Fedora 21 : php-doctrine-annotations-1.2.7-1.fc21 (2015-15201)	15 Sep 201500:00	–	nessus

Vulners

Node

zfcampus zf-apigility-doctrineRange1.0.0–1.0.3composer

zendframework zendframeworkRange2.4.0–2.4.8composer

zendframework zend-cacheRange2.4.0–2.4.8composer

doctrine cacheRange1.0.0–1.3.2composer

aws aws-sdk-phpRange3.0.0–3.2.1composer

zendframework zend-cacheRange2.5.0–2.5.3composer

zendframework zendframework1Range1.12.0–1.12.16composer

doctrine mongodb-odm-bundleRange<3.0.1composer

doctrine mongodb-odmRange<1.0.2composer

doctrine ormRange2.5.0–2.5.1composer

doctrine commonRange2.5.0-stable–2.5.1composer

doctrine commonRange<2.4.3composer

doctrine cacheRange1.4.0–1.4.2composer

doctrine annotationsRange<1.2.7composer

Source	Link
nvd	www.nvd.nist.gov/vuln/detail/CVE-2015-5723
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/2IUUC7HPN4XE5NNTG4MR76OC662XRZUO/
lists	www.lists.fedoraproject.org/archives/list/[email protected]/message/HPS7A54FQ2CR6PH4NDR6UIYJIRNFXW67/
framework	www.framework.zend.com/security/advisory/ZF2015-07
debian	www.debian.org/security/2015/dsa-3369
doctrine-project	www.doctrine-project.org/2015/08/31/security_misconfiguration_vulnerability_in_various_doctrine_projects.html
github	www.github.com/aws/aws-sdk-php/releases/tag/3.2.1
framework	www.framework.zend.com/security/advisory/ZF2015-07
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/aws/aws-sdk-php/CVE-2015-5723.yaml
github	www.github.com/FriendsOfPHP/security-advisories/blob/master/doctrine/cache/CVE-2015-5723.yaml

05 Feb 2024 10:27Current

7.6High risk

Vulners AI Score7.6

CVSS 27.2

CVSS 37.8

EPSS0.00381