CVE-2022-45305

Name of the Vulnerable Software and Affected Versions Chocolatey Python3 package versions 3.11.0 and below

Description The issue is related to insecure permissions in the Chocolatey Python3 package, which grants all users in the Authenticated Users group write privileges for the subfolder C:Python311 and all files located in that folder.

Recommendations For Chocolatey Python3 package versions 3.11.0 and below, consider restricting write access to the C:Python311 subfolder and its files to mitigate the risk of exploitation. As a temporary workaround, review and adjust the permissions of the affected subfolder to ensure that only authorized users have write access.