CVE-2022-45307

2022-11-2900:00:00

mitre

www.cve.org

chocolatey

php

permissions

v8.1.12

authenticated users

write privileges

subfolder c:\tools\php81

files

AI Score

5.2

Confidence

High

EPSS

0.001

Percentile

22.8%

JSON

Insecure permissions in Chocolatey PHP package v8.1.12 and below grants all users in the Authenticated Users group write privileges for the subfolder C:\tools\php81 and all files located in that folder.

References

github.com/ycdxsb/Vuln/blob/main/php-weak-permission-vuln/php-weak-permission-vuln.md