Lucene search

K
veracodeVeracode Vulnerability DatabaseVERACODE:30185
HistoryApr 28, 2021 - 1:55 a.m.

Insecure Temporary File

2021-04-2801:55:11
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
insecure temporary file
openapi-generator-maven-plugin
file.createtempfile
confidential information

EPSS

0

Percentile

12.6%

org.openapitools, openapi-generator-maven-plugin uses insecure temporary file. The vulnerability exists due to the usage of the function File.createTempFile which allows an attacker can predict the name of the temporary file and potentially gain access to confidential information.

EPSS

0

Percentile

12.6%