Lucene search

K
cvelistApacheCVELIST:CVE-2022-45787
HistoryJan 06, 2023 - 9:31 a.m.

CVE-2022-45787 Apache James MIME4J: Temporary File Information Disclosure in MIME4J TempFileStorageProvider

2023-01-0609:31:40
CWE-312
apache
raw.githubusercontent.com
1

5.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%

Unproper laxist permissions on the temporary files used by MIME4J TempFileStorageProvider may lead to information disclosure to other local users. This issue affects Apache James MIME4J version 0.8.8 and prior versions.

We recommend users to upgrade to MIME4j version 0.8.9 or later.

5.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.2%