Vulnerabilities
Projects
Vulnerability Disclosure
About Us
Contact Us
Mend.io Vulnerability Database
What is a CVE vulnerability ID? 
What is a WS vulnerability ID?
What is an MSC vulnerability ID?
New vulnerability? Tell us about it!
What is a WS vulnerability ID?
What is an MSC vulnerability ID?
We found results for “”
WS-2021-0061
Good to know:
Date: April 6, 2021
An issue has been discovered in doctrine/orm version 2.8.3. Composite.php did not wrap part in parenthesis when "or" or "and" was written in lowercase anymore. Fixed in 2.8.4
Language: PHP
Severity Score
Severity Score
Weakness Type (CWE)
Improper Handling of Case Sensitivity
CWE-178Top Fix
Upgrade Version
Upgrade to version kitlabs/orm - 2.8.4;lilianalillyy/doctrine-orm - 2.8.4;doctrine/orm - dev-2.8.x-merge-up-into-2.9.x_602d59a0aa86b9.63081052;doctrine/orm - 2.8.4;doctrine/orm - dev-custom-collections;atheon/orm - 2.8.4
CVSS v3.1
| Base Score: |
|
|---|---|
| Attack Vector (AV): | NETWORK |
| Attack Complexity (AC): | LOW |
| Privileges Required (PR): | NONE |
| User Interaction (UI): | NONE |
| Scope (S): | UNCHANGED |
| Confidentiality (C): | LOW |
| Integrity (I): | LOW |
| Availability (A): | LOW |