CVE-2024-24810 | WiX Toolset up to 4.0.3 on Windows Installer untrusted search path (GHSA-7wh2-wxc7-9ph5)

A vulnerability, which was classified as critical, has been found in WiX Toolset up to 4.0.3 on Windows. This issue affects some unknown processing of the component Installer. The manipulation leads to untrusted search path.

The identification of this vulnerability is CVE-2024-24810. Attacking locally is a requirement. There is no exploit available.

It is recommended to upgrade the affected component.