Homepage

org.codelibs.fess:fess@14.19.1 vulnerabilities

  • latest version

    14.19.2

  • latest non vulnerable version

    14.19.2

  • first published

    8 years ago

  • latest version published

    10 days ago

  • licenses detected

  • package registry

    View on Maven Central Repository
    • Go back to all versions of this package
    Report a new vulnerability Found a mistake?

    Direct Vulnerabilities

    Known vulnerabilities in the org.codelibs.fess:fess package. This does not include vulnerabilities belonging to this package’s dependencies.

    How to fix?

    Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.

    Fix for free
    VulnerabilityVulnerable Version
    • M
    Incorrect Permission Assignment for Critical Resource

    org.codelibs.fess:fess is an Enterprise Search Server. You can install and run Fess quickly on any platforms, which have Java runtime environment.

    Affected versions of this package are vulnerable to Incorrect Permission Assignment for Critical Resource. Due to the createTempFile method in the class SystemHelper, which creates temporary files without explicitly setting restrictive permissions. That allowed an attacker to access sensitive data contained in temporary files.

    How to fix Incorrect Permission Assignment for Critical Resource?

    Upgrade org.codelibs.fess:fess to version 14.19.2 or higher.

    [,14.19.2)
    Go back to all versions of this package