CVE-2023-0481
Fixed upstream EPSS <1%CVSS 3.3
In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile() is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user.
Products: quarkus
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | io.quarkus.resteasy.reactive:resteasy-reactive-common | 3.0.0.Alpha4 |