Description
In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile() is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | Quarkus | Fixed in 2.16.1 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | io.quarkus.resteasy.reactive:resteasy-reactive-common | < 3.0.0.Alpha4 | 3.0.0.Alpha4 | GHSA-j75r-vf64-6rrh |