Lucene search
Veracode Vulnerability DatabaseVERACODE:40663HistoryMay 24, 2023 - 6:36 a.m.
Information Disclosure
2023-05-2406:36:13
Veracode Vulnerability Database
sca.analysiscenter.veracode.com
9
akka-http
information disclosure
vulnerability
fileuploaddirectives
remote attacker
sensitive information
EPSS
0
Percentile
9.0%
com.typesafe.akka:akka-http is vulnerable to Information Disclosure. A remote unauthenticated attacker is able to gain access to of sensitive information due to the creation of temporary files with weak permissions via the FileUploadDirectives.fileUploadAll directive.
Related
cve
cve
CVE-2023-33251
2023-05-21 21:15:08
osv
osv
CVE-2023-33251
2023-05-21 21:15:08
cvelist
cvelist
CVE-2023-33251
2023-05-21 00:00:00
nvd
nvd
CVE-2023-33251
2023-05-21 21:15:08
prion
prion
Design/Logic Flaw
2023-05-21 21:15:00