CVE-2023-0481: Quarkus

Low severity, CVSS 3.3. EPSS: 0.2% chance of exploitation in the next 30 days.

In RestEasy Reactive implementation of Quarkus the insecure File.createTempFile() is used in the FileBodyHandler class which creates temp files with insecure permissions that could be read by a local user.

Affected products

• Quarkus Quarkus: before 2.16.1 (fixed in 2.16.1)

Published 2023-02-24. Last modified 2026-06-17.