CVE-2023-0481

In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile() is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user.

Score

CVSS 3.1 3.3 Low

Status

Modified - secalert@redhat.com

Published

2023-02-24

Last modified

2025-03-12

Weaknesses

CWE-378, CWE-668

Affected products

• Quarkus (Quarkus)

References

• https://github.com/quarkusio/quarkus/pull/30694