exploitDog

GHSA-5xq7-3cgg-j383

Опубликовано: 27 авг. 2026

Источник: github

Github: Не прошло ревью

CVSS3: 3.2

Описание

PropertiesPersistingMetadataStore, the default file-based ConcurrentMetadataStore, persists its state to ${java.io.tmpdir}/spring-integration/metadata-store.properties with world-readable permissions. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12 Spring Integration 5.5.21 and earlier

PropertiesPersistingMetadataStore, the default file-based ConcurrentMetadataStore, persists its state to ${java.io.tmpdir}/spring-integration/metadata-store.properties with world-readable permissions. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12 Spring Integration 5.5.21 and earlier

Ссылки

EPSS

Процентиль: 4%

0.00144

Низкий

3.2 Low

CVSS3

CVE ID

Дефекты

CWE-732

Связанные уязвимости

CVE-2026-59292

CVSS3: 3.2

nvd

5 дней назад

PropertiesPersistingMetadataStore, the default file-based ConcurrentMetadataStore, persists its state to ${java.io.tmpdir}/spring-integration/metadata-store.properties with world-readable permissions. Spring Integration 7.1.0 Spring Integration 7.0.0 - 7.0.5 Spring Integration 6.5.0 - 6.5.10 Spring Integration 6.4.0 - 6.4.12 Spring Integration 5.5.21 and earlier

EPSS

Процентиль: 4%

0.00144

Низкий

3.2 Low

CVSS3

CVE ID

Дефекты

CWE-732