Unscored CVE-2022-29376 EUVD-2022-33715GHSA-4q7h-5rhf-q8ch

Xampp for Windows v8.1.4 and below was discovered to contain insecure permissions for its install directory, allowing attackers to execute …

Published May 23, 2022 · Updated Aug 15, 2025 · Assigned by mitre

Description

Xampp for Windows v8.1.4 and below was discovered to contain insecure permissions for its install directory, allowing attackers to execute arbitrary code via overwriting binaries located in the directory.

References

https://github.com/ycdxsb/Vuln/blob/main/Xampp-Install-Dir-Incorrect-Default-Permission/Xampp-Install-Dir-Incorrect-Default-Permission.md
https://github.com/ycdxsb/Vuln/blob/main/CVE-2022-29376/CVE-2022-29376.md