CVE-2023-0481
Quick assessment
Affected
n/a Quarkus
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Quarkus是一个用于编写 Java 应用程序的云原生 (Linux) 容器优先框架。 Quarkus 存在安全漏洞，该漏洞源于其temp文件权限不安全。
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2023-0481
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile() is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
创建拥有不安全权限的临时文件
Source: CVE Program / CVE List V5
Vulnerability Title
Quarkus 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Quarkus是一个用于编写 Java 应用程序的云原生 (Linux) 容器优先框架。 Quarkus 存在安全漏洞，该漏洞源于其temp文件权限不安全。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| - | Quarkus | Fixed in 2.16.1 | - |
|
II. Public POCs for CVE-2023-0481
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2023-0481
请登录查看更多情报信息。
Patches & Fixes for CVE-2023-0481 (1)
Same Patch Batch · n/a · 2023-02-24 · 18 CVEs total
| CVE-2023-26102 | 7.5 HIGH | rangy 安全漏洞 |
| CVE-2023-1004 | 5.3 MEDIUM | MarkText WSH JScript code injection |
| CVE-2023-1003 | 5.3 MEDIUM | Typora WSH JScript code injection |
| CVE-2023-1010 | 5.3 MEDIUM | vox2png vox2png.c heap-based overflow |
| CVE-2023-1002 | 4.3 MEDIUM | MuYuCMS index.php path traversal |
| CVE-2023-24189 | URule 代码问题漏洞 | |
| CVE-2023-23205 | lib60870 安全漏洞 | |
| CVE-2022-48345 | Braintree sanitize-url 跨站脚本漏洞 | |
| CVE-2022-46440 | swftools 安全漏洞 | |
| CVE-2022-44310 | ecdh.js 安全漏洞 | |
| CVE-2021-35370 | Imcat 安全漏洞 | |
| CVE-2021-35369 | Imcat 安全漏洞 | |
| CVE-2021-35290 | balerocms-src 代码问题漏洞 | |
| CVE-2021-34249 | Online Book Store SQL注入漏洞 | |
| CVE-2021-34167 | taoCMS 跨站请求伪造漏洞 | |
| CVE-2021-33387 | MiniCMS 跨站脚本漏洞 | |
| CVE-2021-33224 | Umbraco Forms 代码问题漏洞 |
IV. Related Vulnerabilities
Same product: Quarkus
-
CVE-2026-50559
Authentication/Authorization Bypass via Advanced Path Normal -
CVE-2026-39852
Quarkus authorization bypass via semicolon path normalizatio -
CVE-2025-66560
Quarkus REST has potential worker thread starvation when HTT -
CVE-2025-49574
Quarkus potential data leak when duplicating a duplicated co -
CVE-2022-4116
Quarkus 代码注入漏洞
Same weakness: CWE-378
-
CVE-2026-97026
Flatpak: flatpak: world-writable temporary child repositorie -
CVE-2026-97025
Flatpak: flatpak: world-readable oci authentication token in -
CVE-2026-25265
Creation of Temporary File with Insecure Permissions in Qual -
CVE-2026-4137
Incomplete Fix for CVE-2025-10279: Insecure Temporary Direct -
CVE-2026-33572
OpenClaw < 2026.2.17 - Insufficient File Permissions in Sess
V. Comments for CVE-2023-0481
No comments yet