C#| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|
| wix | nuget | < 3.14.1 | 3.14.1 |
| wix | nuget | >= 4.0.0, < 4.0.5 | 4.0.5 |
| WixToolset.Util.wixext | nuget | < 4.0.5 | 4.0.5 |
Miggo AIRoot Cause AnalysisThe vulnerability stems from improper handling of directory junctions during recursive deletion. Both functions were modified in the patches to add checks for FILE_ATTRIBUTE_REPARSE_POINT (indicating junctions/symlinks). The commit diffs explicitly show these security checks being added to prevent following reparse points, confirming these functions' role in the vulnerability. The DeleteDirectory function handled physical deletion while RecursePath managed the directory traversal logic - both needed protection against junction following.
KEV Misses 88% of Exploited CVEs- Get the report
