Vulnerability Information
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
N/A
Vulnerability Description
When Akka HTTP before 10.5.2 accepts file uploads via the FileUploadDirectives.fileUploadAll directive, the temporary file it creates has too weak permissions: it is readable by other users on Linux or UNIX, a similar issue to CVE-2022-41946.
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:N/A:N
Vulnerability Type
N/A
Vulnerability Title
Lightbeed Akka Akka-http 安全漏洞
Vulnerability Description
Lightbeed Akka Akka-http是中国Lightbeed社区的一个工具包。提供提供和使用基于HTTP的服务的更通用的工具包。 Lightbeed Akka Akka-http 10.5.2之前版本存在安全漏洞，该漏洞源于通过FileUploadDirectives.fileUploadAll指令上传文件时，其创建的临时文件权限太弱。
CVSS Information
N/A
Vulnerability Type
N/A