CVE-2021-43822

CVE-2021-43822 concerns SQL injection in the Jackalope Doctrine-DBAL PHPCR implementation. The vulnerability arises because the component that translates the query object model into Doctrine DBAL queries does not properly escape certain user-controlled identifiers (node names and xpaths), allowin...

Privilege Escalation And Arbitrary Code Execution

doctrine/phpcr-odm is vulnerable to privilege escalation and arbitrary code execution. The vulnerability exists due to incorrect writable permissions in cache directories, allowing local attackers to escalate privileges and/or execute arbitrary code...