Lucene search
K

4 matches found

OSV
OSV
added 2023/01/12 6:30 a.m.15 views

GHSA-QXXC-7MQ4-MF79 Java Merge-sort Insecure Temporary File vulnerability

Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProvider function in StdTempFileProvider.java, which uses the permissive File.createTempFile function, exposing temporary file contents...

5.5CVSS5.3AI score0.00068EPSS
Exploits0References5
OSV
OSV
added 2023/01/12 5:15 a.m.13 views

CVE-2022-24913

Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProvider function in StdTempFileProvider.java, which uses the permissive File.createTempFile function, exposing temporary file contents...

5.5CVSS5.5AI score
Exploits0References3
Prion
Prion
added 2023/01/12 5:15 a.m.13 views

Session fixation

Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProvider function in StdTempFileProvider.java, which uses the permissive File.createTempFile function, exposing temporary file contents...

1.7CVSS5.4AI score0.00068EPSS
Exploits0References3Affected Software1
Cvelist
Cvelist
added 2023/01/12 5:0 a.m.12 views

CVE-2022-24913

Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProvider function in StdTempFileProvider.java, which uses the permissive File.createTempFile function, exposing temporary file contents...

5.5CVSS5.7AI score0.00068EPSS
Exploits0References3
Rows per page
Query Builder