CVE-2024-29188 | WiX Toolset up to 3.14.0/4.0.4 on Windows Uninstallation RemoveFolderEx link following (GHSA-jx4p-m4wm-vvjg)

A vulnerability was found in WiX Toolset up to 3.14.0/4.0.4 on Windows and classified as critical. This issue affects the function RemoveFolderEx of the component Uninstallation Handler. The manipulation leads to link following.

The identification of this vulnerability is CVE-2024-29188. An attack has to be approached locally. There is no exploit available.

It is recommended to upgrade the affected component.