Information Disclosure

2023-02-2803:23:48

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

resteasy-reactive-common

information disclosure

filebodyhandler.java

temporary file

insecure permissions

local user

0.0004 Low

EPSS

Percentile

5.1%

JSON

resteasy-reactive-common is vulnerable to Information Disclosure. The vulnerability exists because the readFrom function in FileBodyHandler.java creates a temporary file with insecure permissions, which allows a local user to read the temporary file created.

CPENameOperatorVersion
resteasy reactive - common runtimele2.16.0.Final
resteasy reactive - common runtimele3.0.0.Alpha3
resteasy reactive - common runtimele2.16.0.Final
resteasy reactive - common runtimele3.0.0.Alpha3

Name	Operator	Version
resteasy reactive - common runtime	le	2.16.0.Final
resteasy reactive - common runtime	le	3.0.0.Alpha3
resteasy reactive - common runtime	le	2.16.0.Final
resteasy reactive - common runtime	le	3.0.0.Alpha3