Skip to content
OpenAdvisories

Weakness (CWE)

CWE-377: DEPRECATED: Insecure Temporary File

Class Deprecated Mapping prohibited

This entry has been deprecated. It was focused
only on the affected resource (temporary file) and not the
behavior or mistake that produced the insecure temporary
file, which caused confusion and incorrect
mappings.

Source: MITRE CWE-377

All Critical High Medium Low Exploited only Public exploit

3 results · Clear filters · Feed

  • High 7.5
    CVE-2025-67223 Public exploit

    The Aranda File Server (AFS) component in Aranda Software Aranda Service Desk before 8.3.12 stores daily activity logs …

  • Medium 4.4
    CVE-2026-25645 Public exploit

    Requests has Insecure Temp File Reuse in its extract_zipped_paths() utility function

    Requests is a HTTP library. Prior to version 2.33.0, the `requests.utils.extract_zipped_paths()` utility function uses a predictable filename when extracting files from zip archives into the system temporary directory. If the target file already exists, it is…

    psf requests python-pip requests Debian Ubuntu Alpine PyPI
  • High 7.8
    CVE-2022-27772 Public exploit

    Temporary Directory Hijacking to Local Privilege Escalation Vulnerability in org.springframework.boot:spring-boot

    spring-boot versions prior to version v2.2.11.RELEASE was vulnerable to temporary directory hijacking. This vulnerability impacted the org.springframework.boot.web.server.AbstractConfigurableWebServerFactory.createTempDir method. NOTE: This vulnerability only…

    org.springframework.boot:spring-boot Maven