Skip to content
OpenAdvisories

Package · NuGet

PanelSW.Custom.WiX

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

2 results · Feed

  • High 7.3
    GHSA-wq88-fq4x-h2pm

    WiX Burn-based bundles are vulnerable to binary hijack when run as SYSTEM

    # Summary Burn uses an unprotected C:\Windows\Temp directory to copy binaries and run them from there. This directory is not entirely protected against low privilege users. # Details When a bundle runs as SYSTEM user, Burn uses GetTempPathW which points to an…

    PanelSW.Custom.WiX NuGet
  • High 8.2
    GHSA-259p-rvjx-ffwg

    Panel::Software Customized WiX .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges

    # Summary .be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privileges. # Details If the bundle is not run as admin, the user's TEMP folder is used and not the system TEMP folder. A utility is able to monitor the use…

    PanelSW.Custom.WiX NuGet