CVE-2022-47637

MEDIUM 6.7CVE-2022-47637 · Published 12/09/2023 · updated 17/06/2026

In short

CVE-2022-47637 is a MEDIUM (CVSS 6.7) vulnerability affecting xampp (apachefriends).
Chance of exploitation in the next 30 days (EPSS): 0.26%, higher than 17.4% of all vulnerabilities.
No patched version is listed yet: follow the vendor's advisory in References.

Package	Affected versions	Patched versions
xampp apachefriends	`≤ 8.1.12`	No fix yet

Description

The installer in XAMPP through 8.1.12 allows local users to write to the C:\xampp directory. Common use cases execute files under C:\xampp with administrative privileges.

References

shinnai.altervista.org/exploits/DVRT-2023-0001_CVE-2022-47637.pdf · Exploit

More vulnerabilities in xampp

See all →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

xampp

apachefriends

≤ 8.1.12

No fix yet

More vulnerabilities in xampp

See all →