CVE-2026-2817
Spring Data Geode Insecure Temporary Directory Usage
概要
Spring Data Geode Insecure Temporary Directory Usage
原文の説明
取得元が公開している説明をそのまま載せています (多くは英語)。
Use of insecure directory in Spring Data Geode snapshot import extracts archives into predictable, permissive directories under the system temp location. On shared hosts, a local user with basic privileges can access another user’s extracted snapshot contents, leading to unintended exposure of cache data.
参照URL
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- package github.com
- web herodevs.com