CVE-2026-2817
Spring Data Geode Insecure Temporary Directory Usage
Résumé
Spring Data Geode Insecure Temporary Directory Usage
Description d'origine
La description telle que publiée par la source (souvent en anglais).
Use of insecure directory in Spring Data Geode snapshot import extracts archives into predictable, permissive directories under the system temp location. On shared hosts, a local user with basic privileges can access another user’s extracted snapshot contents, leading to unintended exposure of cache data.
Références
- advisory github.com
- advisory nvd.nist.gov
- package github.com
- package github.com
- web herodevs.com