VYPR

Maven package

org.jboss.resteasy/resteasy-multipart-provider

pkg:maven/org.jboss.resteasy/resteasy-multipart-provider

Vulnerabilities (1)

  • CVE-2023-0482Feb 17, 2023
    affected >= 6.0.0.Beta1, < 6.2.3.Finalfixed 6.2.3.Final

    In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user.