Directory Hijacking

com.manydesigns:portofino-microservice-launcher is vulnerable to directory hijacking. A local authenticated attacker is able to create temporary files inside unauthorized directories through createTempDir function of the file WarFileLauncher.java, resulting in disclosure of sensitive information...

CVE-2022-3952

Summary: CVE-2022-3952 affects ManyDesigns Portofino 5.3.2. The vulnerability is in WarFileLauncher.java:createTempDir, which allows creation of a temporary file in a directory with insecure permissions. This could lead to disclosure of sensitive data. A fix is available in Portofino 5.3.3; patch...

ManyDesigns Portofino 安全漏洞

ManyDesigns Portofino is a low-code tool from ManyDesigns Italy. It is used to build model-driven REST APIs and web applications. A security vulnerability exists in ManyDesigns Portofino 5.3.2, which originates in an unknown section of the WarFileLauncher.java file, and can be exploited by an...