Description
In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile() is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user.
Remediation
References
https://github.com/quarkusio/quarkus/pull/30694
Related Vulnerabilities
CVE-2020-28498 Vulnerability in npm package elliptic
CVE-2021-41151 Vulnerability in npm package @backstage/plugin-scaffolder-backend
CVE-2022-1440 Vulnerability in npm package git-interface
CVE-2020-10204 Vulnerability in maven package org.sonatype.nexus:nexus-core
CVE-2022-37724 Vulnerability in maven package wonder.utilities:utilities