Astra Linux – Vulnerability in junit4

In JUnit 4, versions starting from 4.7 and before 4.13.1, the TemporaryFolder test rule contains a local information disclosure vulnerability. On Unix-like systems, the system’s temporary directory is shared among all users on that system. As a result, when files and directories are written to th...

Information disclosure in JUnit4

...

com.intuit.karate:karate-gatling (=1.3.1), com.intuit.karate:karate-junit4 (=1.3.1) +4 more potentially affected by CVE-2023-1370 via com.intuit.karate:karate-core (=1.3.1)

com.intuit.karate:karate-core MAVEN version =1.3.1 is affected by a known vulnerability. The following packages have a transitive dependency on com.intuit.karate:karate-core and may be impacted: - com.intuit.karate:karate-gatling =1.3.1 - com.intuit.karate:karate-junit4 =1.3.1 -...

junit4: TemporaryFolder is shared between all users across system which could result in information disclosure

In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's temporary directory is shared between all users on that system. Because of this, when files and directories are written into this...

USN-4731-1 junit4 vulnerability

It was discovered that JUnit 4 contains a local information disclosure vulnerability. An attacker could possibly use this issue to obtain sensitive information...

Information Exposure

Overview junit:junit is an unit testing framework for Java Affected versions of this package are vulnerable to Information Exposure. The JUnit4 test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's temporary directory is shared between...