Lucene search
GoogleOSV:CVE-2021-21428HistoryMay 10, 2021 - 7:15 p.m.
CVE-2021-21428
2021-05-1019:15:08
Google
osv.dev
14
openapi generator
api client libraries
server stubs
documentation
configuration
file.createtempfile
insecure temporary folders
code generation
security issue
patch
v5.1.0 stable version
software
Openapi generator is a java tool which allows generation of API client libraries (SDK generation), server stubs, documentation and configuration automatically given an OpenAPI Spec. openapi-generator-online creates insecure temporary folders with File.createTempFile during the code generation process. The insecure temporary folders store the auto-generated files which can be read and appended to by any users on the system. The issue has been patched with Files.createTempFile and released in the v5.1.0 stable version.
Related
cve
cve
CVE-2021-21428
2021-05-10 19:15:08
prion
prion
Design/Logic Flaw
2021-05-10 19:15:00
cvelist
cvelist
veracode
veracode
Insecure Temporary File And Folder
2021-05-11 07:28:45
nvd
nvd
CVE-2021-21428
2021-05-10 19:15:08
github
github