Skip to content
OpenAdvisories

Vendor

codelibs

2 known vulnerabilities.

Products

Fess 2
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Low 1.2
    CVE-2025-48382

    Fess has Insecure Temporary File Permissions

    Fess is a deployable Enterprise Search Server. Prior to version 14.19.2, the createTempFile() method in org.codelibs.fess.helper.SystemHelper creates temporary files without explicitly setting restrictive permissions. This could lead to potential information …

    codelibs Fess org.codelibs.fess:fess Maven