Lucene search
+L

8 matches found

osv_ghsa
osv_ghsa
•added 2023/01/12 6:30 a.m.•33 views

GHSA-QXXC-7MQ4-MF79 Java Merge-sort Insecure Temporary File vulnerability

Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProvider function in StdTempFileProvider.java, which uses the permissive File.createTempFile function, exposing temporary file contents...

5.5CVSS5.3AI score0.00251EPSS
SaveExploits0References5
Rows per page
Query Builder