Fess 安全漏洞

Fess is a powerful and easy-to-deploy enterprise search server open-sourced by CodeLibs Project. A security vulnerability exists in Fess versions prior to 14.19.2, which stems from the createTempFile method not having strict permissions set, which could lead to information disclosure...