CVE-2023-0482
Assigner: redhat
Published: 2023-02-17T00:00:00
State: PUBLISHED
descriptions: value: In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user.
affected: vendor: n/a
product: RESTEasy
versions: version: Fixed in RESTEasy 4.7.8.Final
status: affected
problemTypes: descriptions: type: CWE
description: CWE-378
cweId: CWE-378