CVE-2022-24913

5.5MEDIUM

Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProvider() function in StdTempFileProvider.java, which uses the perm

Publicado: 1/12/2023Atualizado: 4/8/2025
Ver no NVDVer no MITRE

Descrição

Versions of the package com.fasterxml.util:java-merge-sort before 1.1.0 are vulnerable to Insecure Temporary File in the StdTempFileProvider() function in StdTempFileProvider.java, which uses the permissive File.createTempFile() function, exposing temporary file contents.

Análise IADesenvolvido por IA

Produtos Afetados

java-merge-sort_projectjava-merge-sort

Referências