Insecure temporary files In io.quarkus.resteasy.reactive:resteasy-reactive-common-parent
Description
RestEasy Reactive implementation of Quarkus allows Creation of Temporary File With Insecure Permissions
In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile() is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user.
Mitigation
Update Impact
Minimal update. May introduce new vulnerabilities or breaking changes.
Ecosystem | Package | Affected version | Patched versions |
|---|---|---|---|
 maven | 3.0.0.alpha4 | ||
maven | 3.0.0.alpha4 |
Aliases
1. 2. 3. 4. 5.
References
1. 2.