Approved changes feed: RSS · Atom

cpe:2.3:a:doctrine-project:object_relational_mapper:2.5.0:alpha2:*:*:*:*:*:*

part: a version: 2.5.0 update: alpha2

VendorDoctrine Project (79e85a21-201a-5178-a7c7-7bed921faede)
ProductObject Relational Mapper (8c4a253d-07ce-56a6-8d16-29afc51acdbe)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*
NotesImported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/doctrine/orm purl2cpe 2026-06-01 10:17:41.799056

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-5723 vulnerable 2026-06-03 14:35:00.529664 Details available
Doctrine Annotations before 1.2.7, Cache before 1.3.2 and 1.4.x before 1.4.2, Common before 2.4.3 and 2.5.x before 2.5.1, ORM before 2.4.8 or 2.5.x before 2.5.1, MongoDB ODM before 1.0.2, and MongoDB ODM Bundle before 3.0.1 use world-writable permissions for cache directories, which allows local users to execute arbitrary PHP code with additional privileges by leveraging an application with the umask set to 0 and that executes cache entries as code.
Published: 2016-06-07T14:00:00.000Z
Updated: 2024-08-06T06:59:04.234Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.