chocolatey

Records6All Threatist records

Exploited (KEV)0None in CISA KEV

CVSS critical0CVSS 9.0–10.0

CVSS high1CVSS 7.0–8.9

Exploited now

chocolatey records in CISA KEV

No chocolatey vulnerabilities are listed in CISA KEV.

Components

Products in the NVD configurations · select one to filter the records

Boxstarter 1 record LOW Chocolatey Azure-pipelines-agent 1 record LOW Chocolatey Cmder 1 record LOW Chocolatey Php 1 record LOW Chocolatey Python3 1 record LOW Chocolatey Ruby 1 record LOW

Records

1 record in Chocolatey Python3 · all components

TI-2022-22298 CVE-2022-45305 · GHSA-5r2m-hcrf-wwfq

Insecure permissions in Chocolatey Python3 package v3.11.0 and below grants all users in…

LOW 20

Insecure permissions in Chocolatey Python3 package v3.11.0 and below grants all users in the Authenticated Users group write privileges for the subfolder C:\Python311 and all files located in that folder.

CVSS 3.1MEDIUM 4.3 Network Low privileges No interaction EPSS 0.0039 Published 2022-11-29 No fix listed CWE-732

Open these records in search →

Critical	0
High	1
Medium	5
Low	0
No CVSS	0