Zend zend-cache 2.5.1

Submit a proposal Propose CVE/GCVE/GHSA reference

Approved changes feed: RSS · Atom

cpe:2.3:a:zend:zend-cache:2.5.1:*:*:*:*:*:*:*

part: a version: 2.5.1 update: *

VendorZend (c83920c2-ab0f-5e38-ada6-b090c6d186df)
ProductZend Cache (6e2f8f47-9ecf-56bb-a5b1-1a97d13c7a51)
Edition*
Language*
Software edition*
Target software*
Target hardware*
Other*

Notes

Imported from NVD CPE 2.0 feed

PURL mappings

PURLSourceLast updated
pkg:github/laminas/laminas-cache purl2cpe 2026-06-01 10:11:09.840736
pkg:github/zendframework/zend-cache purl2cpe 2026-06-01 10:11:09.840737
pkg:rpm/fedora/php-laminas-cache purl2cpe 2026-06-01 10:11:09.840739

Vulnerability references

IdentifiercpeApplicabilitySubmitteddb.gcve.eu detailsRationale
CVE:CVE-2015-5723 vulnerable 2026-06-08 05:06:50.808645 Details available
Doctrine Annotations before 1.2.7, Cache before 1.3.2 and 1.4.x before 1.4.2, Common before 2.4.3 and 2.5.x before 2.5.1, ORM before 2.4.8 or 2.5.x before 2.5.1, MongoDB ODM before 1.0.2, and MongoDB ODM Bundle before 3.0.1 use world-writable permissions for cache directories, which allows local users to execute arbitrary PHP code with additional privileges by leveraging an application with the umask set to 0 and that executes cache entries as code.
Published: 2016-06-07T14:00:00.000Z
Updated: 2024-08-06T06:59:04.234Z
Reference links
Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.

Inspect record JSON

Open JSON directly

Open this panel to browse, search, copy or download the JSON record.