| Package | Affected versions | Patched versions |
|---|---|---|
| io.quarkus.resteasy.reactive:resteasy-reactive-common | < 3.0.0.Alpha4 | 3.0.0.Alpha4 |
| quarkus | < 2.16.1 | 2.16.1 |
In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile() is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user.
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free