-
CVSS Score
-Basic Information
Technical Details
Vulnerability Intelligence
Miggo AI
Miggo AIMiggo AI| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| io.quarkus.resteasy.reactive:resteasy-reactive-common | maven | < 3.0.0.Alpha4 | 3.0.0.Alpha4 |
Miggo AIRoot Cause AnalysisThe vulnerability explicitly identifies File.createTempFile() usage in FileBodyHandler.java as the root cause. The commit diff confirms the insecure method was replaced with Files.createTempFile() which has better permission handling. CWE-378 directly maps to insecure temporary file creation patterns, and the patch aligns with secure coding practices for temporary file creation.