io.automatiko.addons:automatiko-files-filesystem-addon (0.14.0), io.automatiko.addons:automatiko-files-google-storage-addon (0.14.0) +73 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (2.7.5.final)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version 2.7.5.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive-common and may be impacted: -...

io.quarkiverse.hibernatesearchextras:quarkus-hibernate-search-extras-docs (1.2.0), io.quarkiverse.hibernatesearchextras:quarkus-hibernate-search-orm-elasticsearch-aws-deployment (1.2.0) +76 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (2.15.2.final)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version 2.15.2.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive-common and may be impacted: -...

io.quarkus.resteasy.reactive:resteasy-reactive (2.10.3.final), io.quarkus.resteasy.reactive:resteasy-reactive-client (2.10.3.final) +81 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (2.10.3.final)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version 2.10.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive-common and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive...

com.qwlabs.doraemon:quarkus-test-resources (>=0.2.131, <=0.2.155), io.quarkiverse.amazonservices:quarkus-amazon-services-integration-tests (2.0.0.alpha1) +89 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (>=3.0.0.alpha1, <=3.0.0.alpha3)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version =3.0.0.alpha1, =0.2.131, =3.0.0.alpha1, =3.0.0.alpha1, =3.0.0.alpha3 and more Source cves: CVE-2023-0481 Source advisory: OSV:GHSA-J75R-VF64-6RRH...

io.quarkus.resteasy.reactive:resteasy-reactive (2.13.8.final), io.quarkus.resteasy.reactive:resteasy-reactive-client (2.13.8.final) +73 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (2.13.8.final)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version 2.13.8.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive-common and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive...

com.github.mcollovati:quarkus-hilla (>=1.0.0-alpha1, <=1.0.0-beta2), com.github.mcollovati:quarkus-hilla-deployment (>=1.0.0-alpha1, <=1.0.0-beta2) +121 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (2.16.0.final)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version 2.16.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive-common and may be impacted: - com.github.mcollovati:quarkus-hilla...

io.quarkiverse.googlecloudservices:quarkus-google-cloud-services-main-it (>=1.1.0, <=1.1.1), io.quarkiverse.quinoa:quarkus-quinoa-deployment (>=1.0.0, <=1.0.1) +85 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (2.9.0.final)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version 2.9.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive-common and may be impacted: -...

io.quarkus.resteasy.reactive:resteasy-reactive (2.15.0.cr1), io.quarkus.resteasy.reactive:resteasy-reactive-client (2.15.0.cr1) +73 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (2.15.0.cr1)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version 2.15.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive-common and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive...

io.quarkus.resteasy.reactive:resteasy-reactive (2.2.0.cr1), io.quarkus.resteasy.reactive:resteasy-reactive-client (2.2.0.cr1) +33 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (2.2.0.cr1)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version 2.2.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive-common and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive...

CVE-2023-0481

In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user...

CVE-2023-0481

In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user...

CVE-2023-0481

In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user...

br.com.labbs:quarkus-monitor-reactive (1.0.4), br.com.labbs:quarkus-monitor-reactive-deployment (1.0.4) +276 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (>=1.11.0.beta1, <=3.0.0.alpha3)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version =1.11.0.beta1, =1.0.2, =1.0.2, =1.0.2, =1.3.2, =1.0.132, =v1.3.1, =v1.3.1, =1.0.42, =1.0.42, =1.0.42, =1.3.2, =1.0.22, =1.0.22, =1.3.3 and more Source cves: CVE-2023-0481 Source advisory: MEND:CVE-2023-0481...

PT-2023-16294

Name of the Vulnerable Software and Affected Versions Quarkus affected versions not specified Description The issue arises from the use of the insecure File.createTempFile in the FileBodyHandler class within the RestEasy Reactive implementation of Quarkus. This results in the creation of temporar...

CVE-2023-0481: Creation of Temporary File With Insecure Permissions

In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user...

CVE-2023-0481

In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user...

quarkus: privilege escalation vulnerability with RestEasy Reactive scope leakage in Quarkus

A flaw was found in Quarkus. The state and potentially associated permissions can leak from one web request to another in RestEasy Reactive. This flaw allows a low-privileged user to perform operations on the database with a different set of privileges than intended...

Moderate: Red Hat Security Advisory: Red Hat Integration Camel Extensions for Quarkus 2.7 security update

Red Hat Integration Camel Extensions for Quarkus 2.7 is now available. The purpose of this text-only errata is to inform you about the security issues fixed. Red Hat Product Security has rated this update as having an impact of Moderate. A Common Vulnerability Scoring System CVSS base score, whic...

quarkus: privilege escalation vulnerability with RestEasy Reactive scope leakage in Quarkus

A flaw was found in Quarkus. The state and potentially associated permissions can leak from one web request to another in RestEasy Reactive. This flaw allows a low-privileged user to perform operations on the database with a different set of privileges than intended...

quarkus: privilege escalation vulnerability with RestEasy Reactive scope leakage in Quarkus

A flaw was found in Quarkus. The state and potentially associated permissions can leak from one web request to another in RestEasy Reactive. This flaw allows a low-privileged user to perform operations on the database with a different set of privileges than intended...