CVE-2017-20018 — XAMPP Installer uncontrolled search path

CVE-2017-20018

XAMPP Installer uncontrolled search path PUBLISHED

Description (CNA)

A vulnerability was found in XAMPP 7.1.1-0-VC14. It has been classified as problematic. Affected is an unknown function of the component Installer. The manipulation leads to privilege escalation. It is possible to launch the attack remotely.

Affected (CNA)

Vendor / product	Versions
unspecified / XAMPP	affected 7.1.1-0-VC14

CWE

CWE-427

References

https://packetstormsecurity.com/files/142406/xampp-dllhijack.txt
https://vuldb.com/?id.100950

ADP enrichment

CVE

No English description supplied.

https://packetstormsecurity.com/files/142406/xampp-dllhijack.txt
https://vuldb.com/?id.100950

CISA-ADP

No English description supplied.

No references supplied.