CVE-2015-5723 — Annotations vulnerability
Severity
7.8HIGHNVD
EPSS
0.0%
top 90.39%
CISA KEV
Not in KEV
Exploit
No known exploits
Affected products
Timeline
PublishedJun 7
Latest updateMay 17
Description
Doctrine Annotations before 1.2.7, Cache before 1.3.2 and 1.4.x before 1.4.2, Common before 2.4.3 and 2.5.x before 2.5.1, ORM before 2.4.8 or 2.5.x before 2.5.1, MongoDB ODM before 1.0.2, and MongoDB ODM Bundle before 3.0.1 use world-writable permissions for cache directories, which allows local users to execute arbitrary PHP code with additional privileges by leveraging an application with the umask set to 0 and that executes cache entries as code.
CVSS vector
CVSS:3.0/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:HExploitability: 1.8 | Impact: 5.9
Affected Packages20 packages
Also affects: Debian Linux 7.0, 8.0
🔴Vulnerability Details
4📋Vendor Advisories
1Debian▶
CVE-2015-5723: doctrine - Doctrine Annotations before 1.2.7, Cache before 1.3.2 and 1.4.x before 1.4.2, Co...↗2015