Description
Insecure permissions in Chocolatey Python3 package v3.11.0 and below grants all users in the Authenticated Users group write privileges for the subfolder C:\Python311 and all files located in that folder.
Medium · 4.3
CVE-2022-45305
EUVD-2022-48204GHSA-5r2m-hcrf-wwfq
Insecure permissions in Chocolatey Python3 package v3.11.0 and below grants all users in the Authenticated Users group write privileges for…
Published Nov 29, 2022 · Updated Apr 25, 2025 · Assigned by mitre