CVE-2020-15145

CVE-2020-15145 is a high-severity local privilege escalation vulnerability affecting Composer-Setup for Windows prior to version 6.0.0. A local attacker can exploit weak permissions on the ComposerSetup directory to modify composer.bat for elevated command execution or plant a malicious DLL for Local System privileges. The vulnerability has a CVSS score of 8.2 (High) due to its low attack complexity and high impact on confidentiality, integrity, and availability. There is no known active exploitation, public exploit code, or significant community discussion surrounding this CVE.