PT-2024-40481 · Unknown · Doctrine/Orm

Published 2024-05-15 · Updated 2024-05-15

Positive Technologies (AI Summary)

Name of the Vulnerable Software and Affected Versions doctrine/orm (affected versions not specified)

Description The issue is related to a problem in the doctrine/orm project where statements in the Where-Clause were not wrapped in brackets due to improper handling of case insensitive checks.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Related Identifiers

GHSA-VJRG-WPM8-RHRW

Affected Products

Doctrine/Orm

References · 4

• https://osv.dev/vulnerability/GHSA-vjrg-wpm8-rhrw · Vendor Advisory
• https://github.com/doctrine/orm/pull/8591 · Note
• https://github.com/doctrine/orm · Note
• https://github.com/FriendsOfPHP/security-advisories/blob/master/doctrine/orm/2021-04-06.yaml · Note