2 matches found
grails3-cve-2022-27772
grails3-cve-2022-27772 Grails®框架3.3应用程序为TomcatEmbeddedServletContainerFactory提供了自定义实现,该实现覆盖了createTempDirectory方法的实现。然后,该自定义实现被用于从Application.groovy类创建EmbeddedServletContainer bean。 参考:https://github.com/JLLeitschuh/security-research/security/advisories/GHSA-cm59-pr5q-cw85...
7.8CVSS7.5AI score0.00597EPSS
SaveExploits1References1
UBUNTU-CVE-2020-8908
A temp directory creation vulnerability exists in all versions of Guava, allowing an attacker with access to the machine to potentially access data in a temporary directory created by the Guava API com.google.common.io.Files.createTempDir. By default, on unix-like systems, the created directory i...
3.3CVSS6.6AI score0.00976EPSS
SaveExploits1References7
20