Information Disclosure

nanohttpd is vulnerable to information disclosure. The vulnerability exists due to creating a temporary file with insecure permissions in DefaultTempFile of DefaultTempFile.java, allowing an attacker to view all the user's content on the host machine by sending the HTTP request larger than the 10...