chocolatey

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

chocolatey records in CISA KEV

No chocolatey vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Boxstarter 1 record LOW Chocolatey Azure-pipelines-agent 1 record LOW Chocolatey Cmder 1 record LOW Chocolatey Php 1 record LOW Chocolatey Python3 1 record LOW Chocolatey Ruby 1 record LOW

Records

1 record in Chocolatey Php · all components

TI-2022-22300 CVE-2022-45307 · GHSA-w6xx-fw36-hx78

Insecure permissions in Chocolatey PHP package v8.1.12 and below grants all users in the…

LOW 20

Insecure permissions in Chocolatey PHP package v8.1.12 and below grants all users in the Authenticated Users group write privileges for the subfolder C:\tools\php81 and all files located in that folder.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0039 Published 2022-11-29 No fix listed CWE-732

Open these records in search →

Critical	0
High	1
Medium	5
Low	0
No CVSS	0