Skip to content
Sign in
3.3 Low

CVE-2023-0481 In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile() is used in the FileBodyHandler class…

Description

In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile() is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user.

Affected products and versions

Product Affected versions Fixed in
quarkus Versions not published

Other CVEs of quarkus

The 4 CVEs of quarkus →
CVE-2022-4116 A vulnerability was found in quarkus 9.8 Critical CVE-2022-2466 It was found that Quarkus 2.10.x does not terminate HTTP requests header context which may lead to unpredictable… Not rated CVE-2022-0981 A flaw was found in Quarkus Not rated
Track this CVE