CVE-2022-29376

PoC —

CVSS 3.1

8.8 high

EPSS

1%p69

Published

May 23, 2022 (May 23, 2022)

Modified

Jun 17, 2026

Description

Xampp for Windows v8.1.4 and below was discovered to contain insecure permissions for its install directory, allowing attackers to execute arbitrary code via overwriting binaries located in the directory.

Vendors: apachefriends
Products: xampp
Weakness: CWE-276
Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.3%)

In the news0 stories

No ingested article mentions this CVE yet.