Vulnerabilities > Chocolatey > Chocolatey PHP
| DATE | CVE | VULNERABILITY TITLE | RISK |
|---|---|---|---|
| 2022-11-29 | CVE-2022-45307 | Incorrect Permission Assignment for Critical Resource vulnerability in Chocolatey PHP Insecure permissions in Chocolatey PHP package v8.1.12 and below grants all users in the Authenticated Users group write privileges for the subfolder C:\tools\php81 and all files located in that folder. | 4.3 |