2 matches found
CVE-2023-34442
A flaw was found in the camel-jira package. The package was creating a file directly instead of using Files.createTempFile in FileConverter, which could lead to the unexpected creation of a file in a vulnerable directory, giving access to unauthorized actors...
Information Disclosure
org.apache.camel:camel-jira is vulnerable to Information Disclosure. A local attacker is able to gain access to files created through the genericToFile function due to insecure file permissions, resulting in disclosure of sensitive information...