Lucene search

K
gitlabHttps://gitlab.com/gitlab-org/security-products/gemnasium-dbGITLAB-68BD710504569AFBDFA61DD90FF984BA
HistoryJun 13, 2023 - 12:00 a.m.

Incorrect Permission Assignment for Critical Resource

2023-06-1300:00:00
https://gitlab.com/gitlab-org/security-products/gemnasium-db
gitlab.com
18
incorrect permission assignment
critical resource
file.createtempfile()
hutool v5.8.17
information disclosure vulnerability

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

0.0004 Low

EPSS

Percentile

9.0%

Hutool v5.8.17 and below was discovered to contain an information disclosure vulnerability via the File.createTempFile() function at /core/io/FileUtil.java.

Affected configurations

Vulners
Node
mavenhutool-coreRange<5.8.19
CPENameOperatorVersion
maven/cn.hutool/hutool-corelt5.8.19

7.1 High

CVSS3

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

0.0004 Low

EPSS

Percentile

9.0%

Related for GITLAB-68BD710504569AFBDFA61DD90FF984BA