CVE-2022-24913

5.5MEDIUM

Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProvider() function in StdTempFileProvider.java, which uses the perm

게시됨: 1/12/2023업데이트됨: 4/8/2025
NVD에서 보기MITRE에서 보기

설명

Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProvider() function in StdTempFileProvider.java, which uses the permissive File.createTempFile() function, exposing temporary file contents.

AI 분석AI 기반

영향받는 제품

java-merge-sort_projectjava-merge-sort

참조