https://bugzilla.redhat.com/show_bug.cgi?id=1927028
--- Doc Text *updated* by Eric Christensen <sparks(a)redhat.com> ---
In Netty there is a vulnerability on Unix-like systems involving an insecure temp file.
When netty's multipart decoders are used, a local information disclosure can occur via
the local system temporary directory if temporary storing uploads on the disk is enabled.
On unix-like systems, the temporary directory is shared between all user. As such, writing
to this directory using APIs that do not explicitly set the file/directory permissions can
lead to information disclosure.
--
You are receiving this mail because:
You are on the CC list for the bug.