CVE-2017-20018: Apachefriends Xampp

High severity, CVSS 7.8. EPSS: 0.6% chance of exploitation in the next 30 days.

A vulnerability was found in XAMPP 7.1.1-0-VC14. It has been classified as problematic. Affected is an unknown function of the component Installer. The manipulation leads to privilege escalation. It is possible to launch the attack remotely.

Affected products

• Apachefriends Xampp: version 7.1.1-0-vc14 only

Published 2022-06-09. Last modified 2026-06-17.