low3.3
CVE-2023-0481
RestEasy Reactive implementation of Quarkus allows Creation of Temporary File With Insecure Permissions
Impact
In RestEasy Reactive implementation of Quarkus the insecure `File.createTempFile()` is used in the `FileBodyHandler` class which creates temp files with insecure permissions that could be read by a local user.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | io.quarkus.resteasy.reactive:resteasy-reactive-common | < 3.0.0.Alpha4 | 3.0.0.Alpha4 |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Quarkus | Quarkus | before 2.16.1 |