CVE-2022-29376: High severity bitnami xampp vulnerability
Published May 23, 2022
·Updated
Xampp for Windows v8.1.4 and below was discovered to contain insecure permissions for its install directory, allowing attackers to execute arbitrary code via overwriting binaries located in the directory.
Affected Software
4 affected components
Apachefriends Xampp<=8.1.4
Microsoft Windows
All of the following
Apachefriends Xampp<=8.1.4
Microsoft Windows
Event History
May 23, 2022
CVE Published
via MITRE·08:16 PM
Data Sourced
via MITRE·08:16 PM
Description
Data Sourced
via NVD·09:16 PM
DescriptionSeverityWeaknessAffected Software
Frequently Asked Questions
1
What is the vulnerability ID for Xampp for Windows?
The vulnerability ID for Xampp for Windows is CVE-2022-29376.
2
What is the title of the vulnerability?
The title of the vulnerability is 'Xampp for Windows v8.1.4 and below insecure permissions for its install directory'.
3
What is the severity of CVE-2022-29376?
The severity of CVE-2022-29376 is high with a CVSS score of 8.8.
4
What is the affected software for CVE-2022-29376?
The affected software for CVE-2022-29376 is Xampp for Windows version 8.1.4 and below.
5
How can attackers exploit CVE-2022-29376?
Attackers can exploit CVE-2022-29376 by executing arbitrary code via overwriting binaries located in the Xampp install directory.