Unscored CVE-2022-37172 EUVD-2022-39825GHSA-f8pg-6xvg-jxjr

Incorrect access control in the install directory (C:\msys64) of Msys2 v20220603 and below allows authenticated attackers to execute arbitr…

Published Aug 30, 2022 · Updated Aug 3, 2024 · Assigned by mitre

Description

Incorrect access control in the install directory (C:\msys64) of Msys2 v20220603 and below allows authenticated attackers to execute arbitrary code via overwriting binaries located in the directory.

References

https://github.com/ycdxsb/Vuln/tree/main/Msys2-Vuln