CVE-2022-29376

Name of the Vulnerable Software and Affected Versions Xampp for Windows versions 8.1.4 and below

Description The issue is related to insecure permissions for the install directory, allowing attackers to execute arbitrary code by overwriting binaries in the directory.

Recommendations For versions 8.1.4 and below, consider changing the permissions of the install directory to prevent unauthorized access until a patch is available. As a temporary workaround, restrict write access to the install directory to minimize the risk of exploitation. Avoid using the vulnerable directory for executing binaries until the issue is resolved. At the moment, there is no information about a newer version that contains a fix for this vulnerability.