GHSA-jrmh-v64j-mjm9

Source

https://github.com/advisories/GHSA-jrmh-v64j-mjm9

Import Source

https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2023/02/GHSA-jrmh-v64j-mjm9/GHSA-jrmh-v64j-mjm9.json

JSON Data

https://api.osv.dev/v1/vulns/GHSA-jrmh-v64j-mjm9

Aliases

CVE-2023-0482

Published

2023-02-18T00:31:59Z

Modified

2024-02-17T05:42:59.822653Z

Severity

5.5 (Medium) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CVSS Calculator

Summary

Insecure Temporary File in RESTEasy

Details

In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user.

Database specific

{
    "nvd_published_at": "2023-02-17T22:15:00Z",
    "cwe_ids": [
        "CWE-378"
    ],
    "severity": "MODERATE",
    "github_reviewed": true,
    "github_reviewed_at": "2023-02-18T02:18:19Z"
}

References

Affected packages

Maven / org.jboss.resteasy:resteasy-undertow

Package

Name: org.jboss.resteasy:resteasy-undertow; View open source insights on deps.dev
Purl: pkg:maven/org.jboss.resteasy/resteasy-undertow

Affected ranges

Type: ECOSYSTEM
Events: Introduced

0Unknown introduced version / All previous versions are affected

Last affected

6.2.2.Final

Affected versions

3.*

3.0.4.Final

3.0.5.Final

3.0.6.Final

3.0.7.Final

3.0.8.Final

3.0.9.Final

3.0.10.Final

3.0.11.Final

3.0.12.Final

3.0.13.Final

3.0.14.Final

3.0.15.Final

3.0.16.Final

3.0.17.Final

3.0.18.Final

3.0.19.Final

3.0.20.Final

3.0.21.Final

3.0.22.Final

3.0.23.Final

3.0.24.Final

3.0.26.Final

3.1.0.Beta1

3.1.0.Beta2

3.1.0.CR1

3.1.0.CR2

3.1.0.CR3

3.1.0.Final

3.1.1.Final

3.1.2.Final

3.1.3.Final

3.1.4.Final

3.5.0.CR1

3.5.0.CR2

3.5.0.CR3

3.5.0.CR4

3.5.0.Final

3.5.1.Final

3.6.0.CR1

3.6.0.Final

3.6.1.SP1

3.6.1.SP2

3.6.1.SP3

3.6.1.SP5

3.6.1.SP6

3.6.1.SP7

3.6.1.SP8

3.6.1.Final

3.6.2.Final

3.6.3.SP1

3.6.3.Final

3.7.0.Final

3.8.0.Final

3.8.1.Final

3.9.0.Final

3.9.1.Final

3.9.2.Final

3.9.3.SP1

3.9.3.Final

3.10.0.Final

3.11.0.Final

3.11.1.Final

3.11.2.Final

3.11.3.Final

3.11.4.Final

3.11.5.Final

3.12.0.Final

3.12.1.Final

3.13.0.Final

3.13.1.Final

3.13.2.Final

3.14.0.Final

3.15.0.Alpha1

3.15.0.Final

3.15.1.Final

3.15.2.Final

3.15.3.Final

3.15.6.Final

4.*

4.0.0.Beta1

4.0.0.Beta2

4.0.0.Beta3

4.0.0.Beta4

4.0.0.Beta5

4.0.0.Beta6

4.0.0.Beta7

4.0.0.Beta8

4.0.0.CR1

4.0.0.CR2

4.0.0.CR3

4.0.0.Final

4.1.0.Final

4.1.1.Final

4.2.0.Final

4.3.0.Final

4.3.1.Final

4.4.0.CR1

4.4.0.Final

4.4.1.Final

4.4.2.Final

4.4.3.Final

4.5.0.Final

4.5.1.Final

4.5.2.Final

4.5.3.Final

4.5.4.Final

4.5.5.Final

4.5.6.Final

4.5.7.Final

4.5.8.SP1

4.5.8.Final

4.5.9.Final

4.5.10.Final

4.5.11.Final

4.5.12.Beta1

4.5.12.Final

4.6.0.Final

4.6.1.Alpha1

4.6.1.Beta1

4.6.1.Beta2

4.6.1.Beta3

4.6.1.Beta5

4.6.1.Beta6

4.6.1.Beta7

4.6.1.Beta8

4.6.1.Beta9

4.6.1.Final

4.6.2.Final

4.7.0.Beta1

4.7.0.Beta2

4.7.0.Beta3

4.7.0.Beta6

4.7.0.Beta7

4.7.0.Final

4.7.1.Final

4.7.2.Final

4.7.3.Final

4.7.4.Final

4.7.5.Final

4.7.6.Final

4.7.7.Final

4.7.8.Final

4.7.9.Final

5.*

5.0.0.Alpha1

5.0.0.Beta1

5.0.0.Beta2

5.0.0.Beta3

5.0.0.Final

5.0.1.Final

5.0.2.Final

5.0.3.Final

5.0.4.Final

5.0.5.Final

5.0.6.Final

5.0.7.Final

5.0.8.Final

5.0.9.Final

6.*

6.0.0.Beta1

6.0.0.Final

6.0.1.Final

6.0.2.Final

6.0.3.Final

6.1.0.Alpha1

6.1.0.Beta1

6.1.0.Beta2

6.1.0.Beta3

6.1.0.Final

6.2.0.Beta1

6.2.0.Final

6.2.1.Final

6.2.2.Final