CVE-2025-48382

Fess is a deployable Enterprise Search Server. Prior to version 14.19.2, the createTempFile method in org.codelibs.fess.helper.SystemHelper creates temporary files without explicitly setting restrictive permissions. This could lead to potential information disclosure, allowing unauthorized local...

Incorrect Permission Assignment for Critical Resource

Overview org.codelibs.fess:fess is an Enterprise Search Server. You can install and run Fess quickly on any platforms, which have Java runtime environment. Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource. Due to the createTempFile method i...