chocolatey

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

chocolatey records in CISA KEV

No chocolatey vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Boxstarter 1 record LOW Chocolatey Azure-pipelines-agent 1 record LOW Chocolatey Cmder 1 record LOW Chocolatey Php 1 record LOW Chocolatey Python3 1 record LOW Chocolatey Ruby 1 record LOW

Records

1 record in Chocolatey Cmder · all components

TI-2022-22297 CVE-2022-45304 · GHSA-74r4-r4fg-v53q

Insecure permissions in Chocolatey Cmder package v1.3.20 and below grants all users in…

LOW 20

Insecure permissions in Chocolatey Cmder package v1.3.20 and below grants all users in the Authenticated Users group write privileges for the path C:\tools\Cmder and all files located in that folder.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0039 Published 2022-11-29 No fix listed CWE-732

Open these records in search →

Critical	0
High	1
Medium	5
Low	0
No CVSS	0