Lucene search

K
osvGoogleOSV:GHSA-7MCW-XMX3-7P8M
HistoryJun 13, 2023 - 6:30 p.m.

Insecure Temporary File in HuTool

2023-06-1318:30:39
Google
osv.dev
8
hutool
temporary file
information disclosure
vulnerability
fileutil
file createtempfile
core io

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS

0

Percentile

9.0%

Hutool v5.8.17 and below was discovered to contain an information disclosure vulnerability via the File.createTempFile() function at /core/io/FileUtil.java.

CVSS3

7.1

Attack Vector

LOCAL

Attack Complexity

LOW

Privileges Required

LOW

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

HIGH

Integrity Impact

HIGH

Availability Impact

NONE

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

EPSS

0

Percentile

9.0%

Related for OSV:GHSA-7MCW-XMX3-7P8M