Security: wixtoolset/issues
Security Advisories
View known security vulnerabilities and report new vulnerabilities privately to maintainers.
-
Malicious directory junction can cause WiX RemoveFoldersEx to possibly delete elevated filesGHSA-jx4p-m4wm-vvjg published
Mar 23, 2024 by robmenHigh -
WiX Burn-based bundles are vulnerable to binary hijack when run as SYSTEMGHSA-rf39-3f98-xr7r published
Mar 23, 2024 by robmenHigh -
.be TEMP folder is vulnerable to DLL redirection attacks that allow the attacker to escalate privilegesGHSA-7wh2-wxc7-9ph5 published
Feb 7, 2024 by robmenHigh