CVE-2015-3211: PHP-FPM

Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days.

php-fpm allows local users to write to or create arbitrary files via a symlink attack.

Affected products

• PHP-FPM PHP-FPM: affected versions not specified

Published 2017-08-25. Last modified 2026-06-17.