Home
Home
Trends
Trends
Vulnerabilities
Vulnerabilities
News
News
Researchers
Researchers
Why dbugs?
Why dbugs?
Settings

Venusjain10

#41246of 56,335
7.1Total CVSS
Vulnerabilities · 1
PT-2023-4568
7.1
2023-06-14
Google · Google Guava · CVE-2023-2976
**Name of the Vulnerable Software and Affected Versions** Google Guava versions 1.0 through 31.1 **Description** The issue is related to the use of Java's default temporary directory for file creation in `FileBackedOutputStream` in Google Guava. This allows other users and apps on the machine with access to the default Java temporary directory to access the files created by the class. The vulnerability is fixed in version 32.0.0, but it is recommended to use version 32.0.1 due to functionality issues in version 32.0.0 under Windows. **Recommendations** For Google Guava versions 1.0 through 31.1, update to version 32.0.1 to resolve the issue. As a temporary workaround, consider restricting access to the default Java temporary directory to minimize the risk of exploitation.