CVE-2015-5723: Doctrine Annotations before 1.2.7, Cache before 1.3.2 and 1.4.x before 1.4.2, Common before 2.4.3 and 2.5.x...

Security readout for executives and security teams

This flaw is a local privilege escalation risk in several Doctrine PHP projects. Under a risky configuration, cache directories may be world-writable, allowing a local user to influence PHP code run by the application with higher privileges. Exposure is most likely in legacy PHP applications using vulnerable Doctrine packages on shared or multi-user systems. Single-tenant deployments without local untrusted users are less exposed, based on the provided conditions. Treat as targeted remediation for legacy PHP estates, not an internet-wide emergency. Prioritize shared or multi-user servers first because the business risk depends on local access plus unsafe cache permissions. Mitigation focus: Upgrade Doctrine components to the fixed versions listed in the advisory record.; Check vendor and distribution advisories for package-specific update guidance.; Ensure application processes do not run with umask set to 0..

Prepared

Jun 13, 2026, 14:22 UTC (UTC+00:00)

Generated from the cited source records. This long-tail analysis has not been individually reviewed by a named human.