cve.bz

CVE-2023-0482

5.5 mediumEPSS 0.3%

In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user.

Severity

CVSS 3.1

5.5 medium
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
EPSS
0.3% chance of exploitation in the next 30 days; higher than 17% of CVEs (scores of 2026-10-31)
CWE
CWE-378
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-2c6g-pfx3-w7h8Mavenorg.jboss.resteasy:resteasy-core>=6.0.0.Beta1 <6.2.3.Final6.2.3.Final
GHSA-2c6g-pfx3-w7h8Mavenorg.jboss.resteasy:resteasy-core>=5.0.0.Alpha1 <5.0.6.Final5.0.6.Final
GHSA-2c6g-pfx3-w7h8Mavenorg.jboss.resteasy:resteasy-core>=4.0.0.Beta1 <4.7.8.Final4.7.8.Final
GHSA-2c6g-pfx3-w7h8Mavenorg.jboss.resteasy:resteasy-multipart-provider>=6.0.0.Beta1 <6.2.3.Final6.2.3.Final
GHSA-2c6g-pfx3-w7h8Mavenorg.jboss.resteasy:resteasy-multipart-provider>=5.0.0.Alpha1 <5.0.6.Final5.0.6.Final
GHSA-2c6g-pfx3-w7h8Mavenorg.jboss.resteasy:resteasy-multipart-provider>=4.0.0.Beta1 <4.7.8.Final4.7.8.Final
GHSA-2c6g-pfx3-w7h8Mavenorg.jboss.resteasy:resteasy-multipart-provider<3.15.5.Final3.15.5.Final
GHSA-2c6g-pfx3-w7h8Mavenorg.jboss.resteasy:resteasy-core<3.15.5.Final3.15.5.Final

References

Check your stackJSON