CVE-2023-0481

n/a / Quarkus PUBLISHED

Description (CNA)

In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile() is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user.

Affected (CNA)

Vendor / product	Versions
n/a / Quarkus	affected Fixed in 2.16.1

CWE

CWE-378

References

https://github.com/quarkusio/quarkus/pull/30694

ADP enrichment

CVE

No English description supplied.

https://github.com/quarkusio/quarkus/pull/30694

CISA-ADP

No English description supplied.

No references supplied.