ZeroHour

CVE-2023-0481

CVSS 3.1
3.3 low
EPSS
<1%p11
Published
()
Modified
Description

In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile() is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user.

Vendors
quarkus
Products
quarkus
Weakness
CWE-378, CWE-668
Vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N

In the news

No ingested article mentions this CVE yet.