Skip to content
OpenAdvisories

Vendor

chocolatey

1 known vulnerabilities.

Products

boxstarter 1
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.0
    CVE-2020-15264

    Privilege Escalation in Boxstarter

    The Boxstarter installer before version 2.13.0 configures C:\ProgramData\Boxstarter to be in the system-wide PATH environment variable. However, this directory is writable by normal, unprivileged users. To exploit the vulnerability, place a DLL in this direct…

    chocolatey boxstarter