Lucene search
Veracode Vulnerability DatabaseVERACODE:29273HistoryFeb 04, 2021 - 9:04 a.m.
Information Disclosure
2021-02-0409:04:54
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
8
0.0004 Low
EPSS
Percentile
12.8%
com.squareup, connect is vulnerable to information disclosure. The vulnerability exists due to the shared system temporary directory, allowing contents of the file downloaded by downloadFileFromResponse to be visible to all other users on the local system.
| CPE | Name | Operator | Version |
|---|---|---|---|
| connect | le | 2.20191120.0 |
Related
prion
prion
Design/Logic Flaw
2021-02-03 18:15:00
cvelist
cvelist
CVE-2021-23331 Insecure Temporary File
2021-02-03 00:00:00
github
github
Insecure temporary file used in com.squareup:connect
2021-06-16 17:53:20
cve
cve
CVE-2021-23331
2021-02-03 18:15:16
osv
osv
Insecure temporary file used in com.squareup:connect
2021-06-16 17:53:20
nvd
nvd
CVE-2021-23331
2021-02-03 18:15:16