Read the docs

chocolatey

Records6All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical0CVSS 9.0–10.0
CVSS high1CVSS 7.0–8.9

Exploited now

chocolatey records in CISA KEV

No chocolatey vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records
Boxstarter 1 record LOW Chocolatey Azure-pipelines-agent 1 record LOW Chocolatey Cmder 1 record LOW Chocolatey Php 1 record LOW Chocolatey Python3 1 record LOW Chocolatey Ruby 1 record LOW

Records

1 record in Boxstarter · all components

TI-2020-12036 CVE-2020-15264

Privilege Escalation in Boxstarter

Priority LOW 38

The Boxstarter installer before version 2.13.0 configures C:\ProgramData\Boxstarter to be in the system-wide PATH environment variable.

CVSS 3.1HIGH 8.0 Network Low privileges User interaction EPSS 0.01551 Published 2020-10-20 Fixed in 2.13.0 CWE-668
Open these records in search →