VULNERABILITY INTELLIGENCE

CVE-2022-29376

CVSS score8.8 HIGH
EPSS probability1.46%
CISA KEVNot currently listed
Published2022-05-23
Last modified2026-06-17
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Description

Xampp for Windows v8.1.4 and below was discovered to contain insecure permissions for its install directory, allowing attackers to execute arbitrary code via overwriting binaries located in the directory.

Weakness classification

  • CWE-276: Incorrect Default Permissions

Primary references