VDB
CVE-2015-5723
CVE-2015-5723
REJECTED
Doctrine Annotations before 1.2.7, Cache before 1.3.2 and 1.4.x before 1.4.2, Common before 2.4.3 and 2.5.x before 2.5.1, ORM before 2.4.8 or 2.5.x before 2.5.1, MongoDB ODM before 1.0.2, and MongoDB ODM Bundle before 3.0.1 use world-writable permissions for cache directories, which allows local users to execute arbitrary PHP code with additional privileges by leveraging an application with the umask set to 0 and that executes cache entries as code.
EPSS 0.03% · 10.3th percentile
Risk Scores
EPSS Score
0.03%
10.3th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Ubuntu:16.04:LTS | php-doctrine-cache | 0, 1.4.1-1, 1.4.3-1 |
| Ubuntu:18.04:LTS | php-doctrine-annotations | 0, 1.2.7-2 |
| Ubuntu:16.04:LTS | php-doctrine-common | 0, 2.4.2-3, 2.4.3-1 |
| Ubuntu:16.04:LTS | doctrine | 0, 2.4.7-2, 2.4.8-1ubuntu1 |
| Ubuntu:16.04:LTS | php-doctrine-annotations | 1.2.6-1, 0, 1.2.7-1 |
Exploit Intelligence
Timeline
- Jun 7, 2016 CVE Published
- Nov 28, 2016 CVE Updated
- Feb 4, 2022 EPSS Score
- Mar 29, 2022 EPSS Score
- May 20, 2022 EPSS Score
- Jul 12, 2022 EPSS Score
- Sep 3, 2022 EPSS Score
- Oct 26, 2022 EPSS Score
- Dec 18, 2022 EPSS Score
- Feb 8, 2023 EPSS Score
- Mar 7, 2023 EPSS Score
- Apr 2, 2023 EPSS Score
References
- https://ubuntu.com/security/CVE-2015-5723 third-party-advisory
- http://www.doctrine-project.org/2015/08/31/security_misconfiguration_vulnerability_in_various_doctrine_projects.html third-party-advisory
- https://www.cve.org/CVERecord?id=CVE-2015-5723 third-party-advisory