CVE-2023-0481

2023-02-2400:00:00

CWE-378

redhat

www.cve.org

cve-2023-0481

file create temp file

resteasy reactive

quarkus

insecure permissions

4.1 Medium

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

5.1%

JSON

In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile() is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user.

CNA Affected

[
  {
    "vendor": "n/a",
    "product": "Quarkus",
    "versions": [
      {
        "version": "Fixed in 2.16.1",
        "status": "affected"
      }
    ]
  }
]