Skip to content
OpenAdvisories
Medium USN-4731-1 1 CVE

junit4 vulnerability

Published Feb 10, 2021 · Updated Apr 27, 2026

Ecosystem: Ubuntu

Summary

It was discovered that JUnit 4 contains a local information disclosure
vulnerability. An attacker could possibly use this issue to obtain sensitive
information.

Fixed packages 3

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS junit4 4.12-4ubuntu1.1
Ubuntu · 18.04 LTS 18.04:LTS junit4 4.12-8~18.04.1
Ubuntu · 20.04 LTS 20.04:LTS junit4 4.12-8ubuntu0.20.04.1

Vulnerabilities 1

  • Medium 4.4
    CVE-2020-15250

    Information disclosure in JUnit4

    In JUnit4 from version 4.7 and before 4.13.1, the test rule TemporaryFolder contains a local information disclosure vulnerability. On Unix like systems, the system's temporary directory is shared between all users on that system. Because of this, when files a…

    junit-team junit4 junit4 junit4 Debian Ubuntu Azure Linux Alpine Maven

References

  • report
    https://ubuntu.com/security/CVE-2020-15250