https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 01:25:01 +0000 https://cve.radiocsirt.org/vuln/cve-2023-0482 <p><strong>Affected:</strong> RESTEasy</p> <p>In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user.</p> <p><strong>Affected:</strong> RESTEasy</p> <p>In RESTEasy the insecure File.createTempFile() is used in the DataSourceProvider, FileProvider and Mime4JWorkaround classes which creates temp files with insecure permissions that could be read by a local user.</p> https://cve.radiocsirt.org/vuln/cve-2023-0482 https://cve.radiocsirt.org/vuln/usn-7351-1 <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: resteasy, Ubuntu:Pro:22.04:LTS: resteasy, Ubuntu:Pro:24.04:LTS: resteasy</p> <p>Nikos Papadopoulos discovered that RESTEasy improperly handled URL encoding when certain errors occur. An attacker could possibly use this issue to modify the app&#39;s behavior for other users through the network. (CVE-2020-10688)</p> <p>Mirko Selber discovered that RESTEasy improperly validated user input during HTTP response construction. This issue could possibly allow an attacker to cause a denial of service or execute arbitrary code. (CVE-2020-1695)</p> <p>It was discovered that RESTEasy unintentionally disclosed potentially sensitive server information to users during the handling of certain errors. (CVE-2020-25633)</p> <p>It was discovered that RESTEasy unintentionally disclosed parts of its code to users during the handling of certain errors. (CVE-2021-20289)</p> <p>It was discovered that RESTEasy used improper permissions when creating temporary files. An attacker could possibly use this issue to get access to sensitive data. (CVE-2023-0482)</p> <p>It was discovered that RESTEasy improperly handled certain HTTP requests and could be forced into a state in which it can no longer accept incoming connections. An attacker could possibly use this issue to cause a denial of service. (CVE-2024-9622)</p> <p><strong>Affected:</strong> Ubuntu:Pro:20.04:LTS: resteasy, Ubuntu:Pro:22.04:LTS: resteasy, Ubuntu:Pro:24.04:LTS: resteasy</p> <p>Nikos Papadopoulos discovered that RESTEasy improperly handled URL encoding when certain errors occur. An attacker could possibly use this issue to modify the app&#39;s behavior for other users through the network. (CVE-2020-10688)</p> <p>Mirko Selber discovered that RESTEasy improperly validated user input during HTTP response construction. This issue could possibly allow an attacker to cause a denial of service or execute arbitrary code. (CVE-2020-1695)</p> <p>It was discovered that RESTEasy unintentionally disclosed potentially sensitive server information to users during the handling of certain errors. (CVE-2020-25633)</p> <p>It was discovered that RESTEasy unintentionally disclosed parts of its code to users during the handling of certain errors. (CVE-2021-20289)</p> <p>It was discovered that RESTEasy used improper permissions when creating temporary files. An attacker could possibly use this issue to get access to sensitive data. (CVE-2023-0482)</p> <p>It was discovered that RESTEasy improperly handled certain HTTP requests and could be forced into a state in which it can no longer accept incoming connections. An attacker could possibly use this issue to cause a denial of service. (CVE-2024-9622)</p> https://cve.radiocsirt.org/vuln/usn-7351-1