Description
In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile() is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user.
Remediation
References
https://github.com/quarkusio/quarkus/pull/30694
Related Vulnerabilities
CVE-2021-39134 Vulnerability in npm package @npmcli/arborist
CVE-2023-31058 Vulnerability in maven package org.apache.inlong:manager-common
CVE-2023-46998 Vulnerability in maven package org.webjars.bower:bootbox.js
CVE-2022-40955 Vulnerability in maven package org.apache.inlong:sort-connector-jdbc
CVE-2023-46998 Vulnerability in maven package org.webjars.bower:bootbox