Lucene search
+L

1 matches found

Github Security Blog
Github Security Blog
added 2021/06/16 5:53 p.m.60 views

Insecure temporary file used in com.squareup:connect

This affects all versions of package com.squareup:connect. The method prepareDownloadFilecreates creates a temporary file with the permissions bits of -rw-r--r-- on unix-like systems. On unix-like systems, the system temporary directory is shared between users. As such, the contents of the file...

4.4CVSS2.2AI score0.00341EPSS
SaveExploits0References4Affected Software1
Rows per page
Query Builder