CVSS 3.1
3.3 lowCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:NCVE-2023-0481
Low (3.3) in quarkus quarkus. EPSS 0.2% chance of exploitation in the next 30 days. Fixed in io.quarkus.resteasy.reactive:resteasy-reactive-common 3.0.0.Alpha4.
In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile() is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user.
Severity
- EPSS
- 0.2% chance of exploitation in the next 30 days; higher than 10% of CVEs (scores of 2026-11-01)
- CWEs
- CWE-668, CWE-378
- Published
- Modified
- Record from
- the NVD, synced
Affected
- quarkus:quarkus
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-j75r-vf64-6rrh | Maven | io.quarkus.resteasy.reactive:resteasy-reactive-common | <3.0.0.Alpha4 | 3.0.0.Alpha4 |