Local File Write Vulnerability in XAMPP by Apache Friends
CVE-2022-47637

6.7MEDIUM

Key Information:

Vendor

Apachefriends

Status
Xampp
Vendor
CVE Published:
12 September 2023

What is CVE-2022-47637?

The XAMPP installer, when utilized up to version 8.1.12, is susceptible to a local file write vulnerability. This flaw allows local users to gain unauthorized write access to the C:\xampp directory. As a result, malicious actors can potentially execute files with elevated privileges within the XAMPP environment, posing significant risks to the integrity and security of the system. Proper validation and permissions should be enforced to mitigate this issue.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch

References

https://shinnai.altervista.org/exploits/DVRT-2023-0001_CV...

CVSS V3.1

Score:
6.7
Severity:
MEDIUM
Confidentiality:
High
Integrity:
High
Availability:
High
Attack Vector:
Local
Attack Complexity:
Low
Privileges Required:
High
User Interaction:
None
Scope:
Unchanged

Timeline

  • Vulnerability published

  • Vulnerability Reserved

JSON
.