CVE-2022-45307

Name of the Vulnerable Software and Affected Versions Chocolatey PHP package versions 8.1.12 and below

Description The issue is related to insecure permissions in the Chocolatey PHP package, which grants all users in the Authenticated Users group write privileges for the subfolder C:toolsphp81 and all files located in that folder.

Recommendations For Chocolatey PHP package versions 8.1.12 and below, consider restricting write access to the C:toolsphp81 subfolder and its files to mitigate the risk of exploitation. At the moment, there is no information about a newer version that contains a fix for this vulnerability.