Doctrine Project vulnerabilities
3 vulnerabilities
Known vulnerabilities in Doctrine Project products, newest first, with CVSS severity, EPSS, KEV listings and ransomware use, across 12 products.
Products
12- Annotations1 vulnerabilities
- Cache1 vulnerabilities
- Common1 vulnerabilities
- Database Abstraction Layer1 vulnerabilities
- Doctrine1 vulnerabilities
- Doctrinemongodbbundle1 vulnerabilities
- Mongodb Odm1 vulnerabilities
- Object Relational Mapper1 vulnerabilities
- Doctrine1.2.00 vulnerabilities
- Doctrine1.2.10 vulnerabilities
- Doctrine1.2.20 vulnerabilities
- Doctrine1.2.30 vulnerabilities
CVE-2021-43608ubuntuphp-doctrine-dbal+1
EPSS score2.45%
Doctrine DBAL 3.x before 3.1.4 allows SQL Injection. The escaping of offset and length inputs to the generation of a LIMIT clause was not probably cast to an integer, allowing SQL injection to take place if application developers passed unescaped user input to the DBAL QueryBuilder or any other API that ultimately uses the AbstractPlatform::modifyLimitQuery API.CVE-2015-5723debiandoctrine+19EPSS score0.38%
Doctrine Annotations before 1.2.7, Cache before 1.3.2 and 1.4.x before 1.4.2, Common before 2.4.3 and 2.5.x before 2.5.1, ORM before 2.4.8 or 2.5.x before 2.5.1, MongoDB ODM before 1.0.2, and MongoDB ODM Bundle before 3.0.1 use world-writable permissions for cache directories, which allows local users to execute arbitrary PHP code with additional privileges by leveraging an application with the umask set to 0 and that executes cache entries as code.CVE-2011-1522debiandoctrine+1EPSS score2.02%
Multiple SQL injection vulnerabilities in the Doctrine\DBAL\Platforms\AbstractPlatform::modifyLimitQuery function in Doctrine 1.x before 1.2.4 and 2.x before 2.0.3 allow remote attackers to execute arbitrary SQL commands via the (1) limit or (2) offset field.