Количество 2
Количество 2
CVE-2022-24913
Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProvider() function in StdTempFileProvider.java, which uses the permissive File.createTempFile() function, exposing temporary file contents.
GHSA-qxxc-7mq4-mf79
Java Merge-sort Insecure Temporary File vulnerability
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2022-24913 Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProvider() function in StdTempFileProvider.java, which uses the permissive File.createTempFile() function, exposing temporary file contents. | CVSS3: 5.5 | 0% Низкий | около 3 лет назад |
| GHSA-qxxc-7mq4-mf79 Java Merge-sort Insecure Temporary File vulnerability | CVSS3: 5.5 | 0% Низкий | около 3 лет назад |
Уязвимостей на страницу