Lucene search
K

7 matches found

Github Security Blog
Github Security Blog
added 2023/06/13 6:30 p.m.15 views

Insecure Temporary File in HuTool

Hutool v5.8.17 and below was discovered to contain an information disclosure vulnerability via the File.createTempFile function at /core/io/FileUtil.java...

7.1CVSS6.6AI score0.0003EPSS
Exploits1References4Affected Software1
RedHat Linux
RedHat Linux
added 2023/05/10 11:25 a.m.2 views

RESTEasy: creation of insecure temp files

In RESTEasy the insecure File.createTempFile is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user...

5.5CVSS5.8AI score0.0005EPSS
Exploits0References4
RedHat Linux
RedHat Linux
added 2023/03/29 11:44 a.m.3 views

RESTEasy: creation of insecure temp files

In RESTEasy the insecure File.createTempFile is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user...

5.5CVSS5.8AI score0.0005EPSS
Exploits0References4
OSV
OSV
added 2023/02/17 10:15 p.m.30 views

CVE-2023-0482

In RESTEasy the insecure File.createTempFile is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user...

5.5CVSS6AI score
Exploits0References2
Debian CVE
Debian CVE
added 2023/02/17 12:0 a.m.27 views

CVE-2023-0482

In RESTEasy the insecure File.createTempFile is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user...

5.5CVSS6.3AI score0.0005EPSS
Exploits0
RedhatCVE
RedhatCVE
added 2023/01/31 5:5 p.m.35 views

CVE-2023-0482

In RESTEasy the insecure File.createTempFile is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user...

5.3CVSS5.7AI score0.0005EPSS
Exploits0References3
Cvelist
Cvelist
added 2021/03/23 8:26 p.m.12 views

CVE-2021-28100

Priam uses File.createTempFile, which gives the permissions on that file -rw-r--r--. An attacker with read access to the local filesystem can read anything written there by the Priam process...

5.4AI score0.00044EPSS
Exploits0References1
Rows per page
Query Builder