In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile() is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user.
References
Link | Resource |
---|---|
https://github.com/quarkusio/quarkus/pull/30694 | Patch Vendor Advisory |
Configurations
History
No history.
Information
Published : 2023-02-24 18:15
Updated : 2024-02-28 19:51
NVD link : CVE-2023-0481
Mitre link : CVE-2023-0481
CVE.ORG link : CVE-2023-0481
JSON object : View
Products Affected
quarkus
- quarkus