Vulnerability Database

309,084

Total vulnerabilities in the database

CVE-2023-0482

In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user.

Published: Jan 15, 2025
Updated: Nov 17, 2025
CVE: CVE-2023-0482
GHSA: GHSA-2c6g-pfx3-w7h8
Severity: Medium
Exploit:

CVSS v3:

Severity: Medium
Score: 5.5
AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

CWEs:

CWE-378

Affected Software
References

Software	From	Fixed in
org.jboss.resteasy / resteasy-core	6.0.0.Beta1	6.2.3.Final
org.jboss.resteasy / resteasy-core	5.0.0.Alpha1	5.0.6.Final
org.jboss.resteasy / resteasy-core	4.0.0.Beta1	4.7.8.Final
org.jboss.resteasy / resteasy-multipart-provider	6.0.0.Beta1	6.2.3.Final
org.jboss.resteasy / resteasy-multipart-provider	5.0.0.Alpha1	5.0.6.Final
org.jboss.resteasy / resteasy-multipart-provider	4.0.0.Beta1	4.7.8.Final
org.jboss.resteasy / resteasy-multipart-provider	-	3.15.5.Final
org.jboss.resteasy / resteasy-core	-	3.15.5.Final
redhat / resteasy	5.0.5	5.0.5.x
redhat / resteasy	4.7.7	4.7.7.x
redhat / resteasy	3.15.4	3.15.4.x
redhat / resteasy	6.2.2	6.2.2.x

Deep Security Visibility Without the Complexity

SynScan provides clear, real-time security insights so you can monitor your attack surface, spot risks early, and act fast—without extra complexity.

No setup fees
5-min deployment
Cancel anytime