GitHub Advisoryadvisory · Maven

GHSA-7mcw-xmx3-7p8m Insecure Temporary File in HuTool

HIGH Published 2023-06-13 Modified 2023-06-21 Official page ↗
Aliases
CVE-2023-33695
Ecosystem
Maven
Packages
cn.hutool:hutool-core
Severity
High
CVSS vector
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Weaknesses
CWE-377, CWE-732
Reviewed
2023-06-14

Affected packages

• Maven cn.hutool:hutool-core: < 5.8.19 → fixed in 5.8.19

Description

Hutool v5.8.17 and below was discovered to contain an information disclosure vulnerability via the `File.createTempFile()` function at `/core/io/FileUtil.java`.

Related

Weakness · not in database (1)

Alias · CVE (1)

  • CVE-2023-33695 Hutool v5.8.17 and below was discovered to contain an information disclosure vulnerability via the File.createTempFile() function at… vulnerability

Weakness · CWE (1)

  • CWE-732 Incorrect Permission Assignment for Critical Resource weakness

References