com.github.mcollovati:quarkus-hilla (>=1.0.0-alpha1, <=1.0.0-beta2), com.github.mcollovati:quarkus-hilla-deployment (>=1.0.0-alpha1, <=1.0.0-beta2) +121 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (2.16.0.final)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version 2.16.0.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive-common and may be impacted: - com.github.mcollovati:quarkus-hilla...

com.ibm.research.kar:kar-runtime-quarkus (1.0.9), io.quarkus.resteasy.reactive:resteasy-reactive (1.13.3.final) +25 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (1.13.3.final)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version 1.13.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive-common and may be impacted: - com.ibm.research.kar:kar-runtime-quarkus 1.0.9...

io.quarkus.resteasy.reactive:resteasy-reactive (2.5.3.final), io.quarkus.resteasy.reactive:resteasy-reactive-client (2.5.3.final) +53 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (2.5.3.final)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version 2.5.3.final is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive-common and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive...

io.quarkus.resteasy.reactive:resteasy-reactive (2.10.0.cr1), io.quarkus.resteasy.reactive:resteasy-reactive-client (2.10.0.cr1) +72 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (2.10.0.cr1)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version 2.10.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive-common and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive...

io.quarkus.resteasy.reactive:resteasy-reactive (2.1.0.cr1), io.quarkus.resteasy.reactive:resteasy-reactive-client (2.1.0.cr1) +33 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (2.1.0.cr1)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version 2.1.0.cr1 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus.resteasy.reactive:resteasy-reactive-common and may be impacted: - io.quarkus.resteasy.reactive:resteasy-reactive...

CVE-2023-0481

In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user...

Design/Logic Flaw

In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user...

CVE-2023-0481

In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user...

CVE-2023-0481

In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user...

CVE-2023-0481

In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user...

br.com.labbs:quarkus-monitor-reactive (1.0.4), br.com.labbs:quarkus-monitor-reactive-deployment (1.0.4) +276 more potentially affected by CVE-2023-0481 via io.quarkus.resteasy.reactive:resteasy-reactive-common (>=1.11.0.beta1, <=3.0.0.alpha3)

io.quarkus.resteasy.reactive:resteasy-reactive-common MAVEN version =1.11.0.beta1, =1.0.2, =1.0.2, =1.0.2, =1.3.2, =1.0.132, =v1.3.1, =v1.3.1, =1.0.42, =1.0.42, =1.0.42, =1.3.2, =1.0.22, =1.0.22, =1.3.3 and more Source cves: CVE-2023-0481 Source advisory: MEND:CVE-2023-0481...

CVE-2023-0481

The CVE-2023-0481 issue affects the RestEasy Reactive implementation of Quarkus, where FileBodyHandler uses File.createTempFile() to create temporary files with insecure permissions that could be read by a local user. This is evidenced by multiple sources in the connected documents: Veracode note...

PT-2023-16294

Name of the Vulnerable Software and Affected Versions Quarkus affected versions not specified Description The issue arises from the use of the insecure File.createTempFile in the FileBodyHandler class within the RestEasy Reactive implementation of Quarkus. This results in the creation of temporar...

CVE-2023-0481: Creation of Temporary File With Insecure Permissions

In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user...

io.apiman:apiman-gateway-platforms-undertow (>=1.1.0.rc3, <=1.2.1.final), io.undertow.jastow:jastow (>=1.0.1.final, <=1.0.3.final) +3 more potentially affected by CVE-2022-4492 via io.undertow:undertow-core (1.0.1.final)

io.undertow:undertow-core MAVEN version 1.0.1.final is affected by a known vulnerability. The following packages have a transitive dependency on io.undertow:undertow-core and may be impacted: - io.apiman:apiman-gateway-platforms-undertow =1.1.0.rc3, =1.0.1.final, =3.0.7.final, =3.0.12.final Sourc...

io.quarkus:quarkus-azure-functions-http (0.23.2), io.quarkus:quarkus-azure-functions-http-deployment (0.23.2) +49 more potentially affected by CVE-2023-0044 via io.quarkus:quarkus-vertx-http (0.23.2)

io.quarkus:quarkus-vertx-http MAVEN version 0.23.2 is affected by a known vulnerability. The following packages have a transitive dependency on io.quarkus:quarkus-vertx-http and may be impacted: - io.quarkus:quarkus-azure-functions-http 0.23.2 - io.quarkus:quarkus-azure-functions-http-deployment...

Duplicate Advisory: Insecure Temporary File in RESTEasy

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2c6g-pfx3-w7h8. This link is maintained to preserve external references. Original Description In RESTEasy the insecure File.createTempFile is used in the DataSourceProvider, FileProvider and Mime4JWorkaround...

GHSA-JRMH-V64J-MJM9 Duplicate Advisory: Insecure Temporary File in RESTEasy

Duplicate Advisory This advisory has been withdrawn because it is a duplicate of GHSA-2c6g-pfx3-w7h8. This link is maintained to preserve external references. Original Description In RESTEasy the insecure File.createTempFile is used in the DataSourceProvider, FileProvider and Mime4JWorkaround...

DEBIAN-CVE-2023-0482

In RESTEasy the insecure File.createTempFile is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user...

CVE-2023-0482

In RESTEasy the insecure File.createTempFile is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user...