Lucene search
+L

6 matches found

OSV
OSV
added 2023/01/12 6:30 a.m.19 views

GHSA-QXXC-7MQ4-MF79 Java Merge-sort Insecure Temporary File vulnerability

Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProvider function in StdTempFileProvider.java, which uses the permissive File.createTempFile function, exposing temporary file contents...

5.5CVSS5.3AI score0.0024EPSS
SaveExploits0References5
Rows per page
Query Builder