René's URL Explorer Experiment


Title: Java: CWE-200: Temp directory local information disclosure vulnerability by JLLeitschuh · Pull Request #4388 · github/codeql · GitHub

Open Graph Title: Java: CWE-200: Temp directory local information disclosure vulnerability by JLLeitschuh · Pull Request #4388 · github/codeql

X Title: Java: CWE-200: Temp directory local information disclosure vulnerability by JLLeitschuh · Pull Request #4388 · github/codeql

Description: This vulnerability detects the use of the local temporary directory in ways that potentially expose sensitive information to other users. Some examples public class TempDirUsageVulnerable { void exampleVulnerable() { File temp1 = File.createTempFile("random", ".txt"); // BAD: File has permissions `-rw-r--r--` File temp2 = File.createTempFile("random", "file", null); // BAD: File has permissions `-rw-r--r--` File systemTempDir = new File(System.getProperty("java.io.tmpdir")); File temp3 = File.createTempFile("random", "file", systemTempDir); // BAD: File has permissions `-rw-r--r--` File tempDir = com.google.common.io.Files.createTempDir(); // BAD: CVE-2020-8908: Directory has permissions `drwxr-xr-x` new File(System.getProperty("java.io.tmpdir"), "/child").mkdir(); // BAD: Directory has permissions `-rw-r--r--` File tempDirChildFile = new File(System.getProperty("java.io.tmpdir"), "/child-create-file.txt"); Files.createFile(tempDirChildFile.toPath()); // BAD: File has permissions `-rw-r--r--` } }

Open Graph Description: This vulnerability detects the use of the local temporary directory in ways that potentially expose sensitive information to other users. Some examples public class TempDirUsageVulnerable { voi...

X Description: This vulnerability detects the use of the local temporary directory in ways that potentially expose sensitive information to other users. Some examples public class TempDirUsageVulnerable { voi...

Opengraph URL: https://github.com/github/codeql/pull/4388

X: @github

direct link

Domain: github.com

route-pattern/:user_id/:repository/pull/:id/files(.:format)
route-controllerpull_requests
route-actionfiles
fetch-noncev2:3153ab0a-7c9b-ae2b-1b5f-e12e268b8b97
current-catalog-service-hashae870bc5e265a340912cde392f23dad3671a0a881730ffdadd82f2f57d81641b
request-id8FD4:142B17:31EEB9:441C1E:6A4C7C49
html-safe-nonce82404549ce951dd1fc36b1cf2fe593566da1d303c7069c99d935a5753bdf250b
visitor-payloadeyJyZWZlcnJlciI6IiIsInJlcXVlc3RfaWQiOiI4RkQ0OjE0MkIxNzozMUVFQjk6NDQxQzFFOjZBNEM3QzQ5IiwidmlzaXRvcl9pZCI6IjcwMDg1MjgyMzIzOTY2NTE1OTMiLCJyZWdpb25fZWRnZSI6ImlhZCIsInJlZ2lvbl9yZW5kZXIiOiJpYWQifQ==
visitor-hmac9f9ed153da91e41c17a33a11cbe2ccae7d9df54af4f36fb2b3d9053a4ce90c84
hovercard-subject-tagpull_request:496678336
github-keyboard-shortcutsrepository,pull-request-list,pull-request-conversation,pull-request-files-changed,copilot
google-site-verificationApib7-x98H0j5cPqHWwSMm6dNU4GmODRoqxLiDzdx9I
octolytics-urlhttps://collector.github.com/github/collect
analytics-location///pull_requests/show/files
fb:app_id1401488693436528
apple-itunes-appapp-id=1477376905, app-argument=https://github.com/github/codeql/pull/4388/files
twitter:imagehttps://avatars.githubusercontent.com/u/1323708?s=400&v=4
twitter:cardsummary_large_image
og:imagehttps://avatars.githubusercontent.com/u/1323708?s=400&v=4
og:image:altThis vulnerability detects the use of the local temporary directory in ways that potentially expose sensitive information to other users. Some examples public class TempDirUsageVulnerable { voi...
og:site_nameGitHub
og:typeobject
hostnamegithub.com
expected-hostnamegithub.com
None3d11bb817438277de2a940854450e83a7d32b6aeb5014e9e6b00a6423900251c
turbo-cache-controlno-preview
diff-viewunified
go-importgithub.com/github/codeql git https://github.com/github/codeql.git
octolytics-dimension-user_id9919
octolytics-dimension-user_logingithub
octolytics-dimension-repository_id143040428
octolytics-dimension-repository_nwogithub/codeql
octolytics-dimension-repository_publictrue
octolytics-dimension-repository_is_forkfalse
octolytics-dimension-repository_network_root_id143040428
octolytics-dimension-repository_network_root_nwogithub/codeql
turbo-body-classeslogged-out env-production page-responsive full-width
disable-turbotrue
browser-stats-urlhttps://api.github.com/_private/browser/stats
browser-errors-urlhttps://api.github.com/_private/browser/errors
releasecd470457e909b9d062f8002cf438ba870e6acff6
ui-targetcanary-1
theme-color#1e2327
color-schemelight dark

Links:

Skip to contenthttps://github.com/github/codeql/pull/4388/files#start-of-content
https://github.com/
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F4388%2Ffiles
GitHub CopilotWrite better code with AIhttps://github.com/features/copilot
GitHub Copilot appDirect agents from issue to mergehttps://github.com/features/ai/github-app
MCP RegistryNewIntegrate external toolshttps://github.com/mcp
ActionsAutomate any workflowhttps://github.com/features/actions
CodespacesInstant dev environmentshttps://github.com/features/codespaces
IssuesPlan and track workhttps://github.com/features/issues
Code ReviewManage code changeshttps://github.com/features/code-review
GitHub Advanced SecurityFind and fix vulnerabilitieshttps://github.com/security/advanced-security
Code securitySecure your code as you buildhttps://github.com/security/advanced-security/code-security
Secret protectionStop leaks before they starthttps://github.com/security/advanced-security/secret-protection
Why GitHubhttps://github.com/why-github
Documentationhttps://docs.github.com
Bloghttps://github.blog
Changeloghttps://github.blog/changelog
Marketplacehttps://github.com/marketplace
View all featureshttps://github.com/features
Enterpriseshttps://github.com/enterprise
Small and medium teamshttps://github.com/team
Startupshttps://github.com/enterprise/startups
Nonprofitshttps://github.com/solutions/industry/nonprofits
App Modernizationhttps://github.com/solutions/use-case/app-modernization
DevSecOpshttps://github.com/solutions/use-case/devsecops
DevOpshttps://github.com/solutions/use-case/devops
CI/CDhttps://github.com/solutions/use-case/ci-cd
View all use caseshttps://github.com/solutions/use-case
Healthcarehttps://github.com/solutions/industry/healthcare
Financial serviceshttps://github.com/solutions/industry/financial-services
Manufacturinghttps://github.com/solutions/industry/manufacturing
Governmenthttps://github.com/solutions/industry/government
View all industrieshttps://github.com/solutions/industry
View all solutionshttps://github.com/solutions
AIhttps://github.com/resources/articles?topic=ai
Software Developmenthttps://github.com/resources/articles?topic=software-development
DevOpshttps://github.com/resources/articles?topic=devops
Securityhttps://github.com/resources/articles?topic=security
View all topicshttps://github.com/resources/articles
Customer storieshttps://github.com/customer-stories
Events & webinarshttps://github.com/resources/events
Ebooks & reportshttps://github.com/resources/whitepapers
Business insightshttps://github.com/solutions/executive-insights
GitHub Skillshttps://skills.github.com
Documentationhttps://docs.github.com
Customer supporthttps://support.github.com
Community forumhttps://github.com/orgs/community/discussions
Trust centerhttps://github.com/trust-center
Partnershttps://github.com/partners
View all resourceshttps://github.com/resources
GitHub SponsorsFund open source developershttps://github.com/sponsors
Security Labhttps://securitylab.github.com
Maintainer Communityhttps://maintainers.github.com
Acceleratorhttps://github.com/accelerator
GitHub Starshttps://stars.github.com
Archive Programhttps://archiveprogram.github.com
Topicshttps://github.com/topics
Trendinghttps://github.com/trending
Collectionshttps://github.com/collections
Enterprise platformAI-powered developer platformhttps://github.com/enterprise
GitHub Advanced SecurityEnterprise-grade security featureshttps://github.com/security/advanced-security
Copilot for BusinessEnterprise-grade AI featureshttps://github.com/features/copilot/copilot-business
Premium SupportEnterprise-grade 24/7 supporthttps://github.com/premium-support
Pricinghttps://github.com/pricing
Search syntax tipshttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
documentationhttps://docs.github.com/search-github/github-code-search/understanding-github-code-search-syntax
Sign in https://github.com/login?return_to=https%3A%2F%2Fgithub.com%2Fgithub%2Fcodeql%2Fpull%2F4388%2Ffiles
Sign up https://github.com/signup?ref_cta=Sign+up&ref_loc=header+logged+out&ref_page=%2F%3Cuser-name%3E%2F%3Crepo-name%3E%2Fpull_requests%2Fshow%2Ffiles&source=header-repo&source_repo=github%2Fcodeql
Reloadhttps://github.com/github/codeql/pull/4388/files
Reloadhttps://github.com/github/codeql/pull/4388/files
Reloadhttps://github.com/github/codeql/pull/4388/files
Please reload this pagehttps://github.com/github/codeql/pull/4388/files
github https://github.com/github
codeqlhttps://github.com/github/codeql
Notifications https://github.com/login?return_to=%2Fgithub%2Fcodeql
Fork 2k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Star 9.8k https://github.com/login?return_to=%2Fgithub%2Fcodeql
Code https://github.com/github/codeql
Issues 987 https://github.com/github/codeql/issues
Pull requests 424 https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality 0 https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
Code https://github.com/github/codeql
Issues https://github.com/github/codeql/issues
Pull requests https://github.com/github/codeql/pulls
Discussions https://github.com/github/codeql/discussions
Actions https://github.com/github/codeql/actions
Projects https://github.com/github/codeql/projects
Models https://github.com/github/codeql/models
Security and quality https://github.com/github/codeql/security
Insights https://github.com/github/codeql/pulse
Sign up for GitHub https://github.com/signup?return_to=%2Fgithub%2Fcodeql%2Fissues%2Fnew%2Fchoose
terms of servicehttps://docs.github.com/terms
privacy statementhttps://docs.github.com/privacy
Sign inhttps://github.com/login?return_to=%2Fgithub%2Fcodeql%2Fissues%2Fnew%2Fchoose
smowtonhttps://github.com/smowton
github:mainhttps://github.com/github/codeql/tree/main
JLLeitschuh:feat/JLL/java/CWE-200_temp_directory_local_information_disclosurehttps://github.com/JLLeitschuh/ql/tree/feat/JLL/java/CWE-200_temp_directory_local_information_disclosure
Conversation 159 https://github.com/github/codeql/pull/4388
Findings https://github.com/github/codeql/pull/4388/findings
Commits 39 https://github.com/github/codeql/pull/4388/commits
Checks 0 https://github.com/github/codeql/pull/4388/checks
Files changed https://github.com/github/codeql/pull/4388/files
Please reload this pagehttps://github.com/github/codeql/pull/4388/files
Java: CWE-200: Temp directory local information disclosure vulnerability https://github.com/github/codeql/pull/4388/files#top
Show all changes 39 commits https://github.com/github/codeql/pull/4388/files
3a15678 Java: CWE-200: Temp directory local information disclosure vulnerability JLLeitschuh Oct 2, 2020 https://github.com/github/codeql/pull/4388/commits/3a15678b1ef23b012ac807116256a884c74295d1
cf0ed81 Add TempDir taint tracking for Files.write JLLeitschuh Oct 14, 2020 https://github.com/github/codeql/pull/4388/commits/cf0ed8157543340340124b92db7c1ca49460a6d8
ecad753 Add mkdirs check JLLeitschuh Dec 8, 2020 https://github.com/github/codeql/pull/4388/commits/ecad7534ae7b2f6740847c431a0aa17ef02c9012
bc12e99 Add `java.nio.file.Files` API checks JLLeitschuh Jan 2, 2021 https://github.com/github/codeql/pull/4388/commits/bc12e994b0d62398e95b889b1d6bbbf53916416f
13fed0e Temp Dir Info Disclosure: Final pass and add documentation JLLeitschuh Jan 23, 2021 https://github.com/github/codeql/pull/4388/commits/13fed0e9b6c8a414dbedb6ddef5694efa13229a7
e4c017e Apply suggestions from code review JLLeitschuh Feb 16, 2021 https://github.com/github/codeql/pull/4388/commits/e4c017e888d15d69823986fc34e9bd1847c6f236
f910fd4 Remove path flow tracking in 'TempDirLocalInformationDisclosureFromMe… JLLeitschuh Feb 16, 2021 https://github.com/github/codeql/pull/4388/commits/f910fd4719dcc7ba6ccd38f849861a2cb86b53c8
7929fae Apply suggestions from code review JLLeitschuh Feb 16, 2021 https://github.com/github/codeql/pull/4388/commits/7929faedc005572c4bf9eb7982876cb174aa34e2
41b5011 Apply suggestions from code review JLLeitschuh Feb 16, 2021 https://github.com/github/codeql/pull/4388/commits/41b5011b8198ea219732731cb4872924c2dfa8f2
f6067d2 Fix file names and formatting from PR feedback JLLeitschuh Feb 24, 2021 https://github.com/github/codeql/pull/4388/commits/f6067d28f980e1d8db1b472fa0c502932cfd4495
c19f52c Add release notes for "Temporary Directory Local information disclosure" JLLeitschuh Feb 25, 2021 https://github.com/github/codeql/pull/4388/commits/c19f52cd04fbca929c56fe3183a8c52662ff6c82
7e55c92 Apply suggestions from code review JLLeitschuh Mar 22, 2021 https://github.com/github/codeql/pull/4388/commits/7e55c92eb4098003f85e6a7d96482acd4c52020d
6683198 Add QLdoc to TempDirUtils JLLeitschuh Mar 22, 2021 https://github.com/github/codeql/pull/4388/commits/66831989b71b2471e39462b0af5f584ed5832309
df716cb Revert changes to MethodAccessSystemGetProperty JLLeitschuh Mar 22, 2021 https://github.com/github/codeql/pull/4388/commits/df716cbaa02cc0d0f4b989f6ffe852bf47604445
cb30385 Update java/ql/src/Security/CWE/CWE-200/TempDirUtils.qll JLLeitschuh Apr 8, 2021 https://github.com/github/codeql/pull/4388/commits/cb3038568447299c1858e8951e0a605dc5eb6b06
7e514e9 Add QLdoc and fix Compiler Errors in Tests JLLeitschuh Apr 8, 2021 https://github.com/github/codeql/pull/4388/commits/7e514e9ef9255a2296a3f45a59ca8ca3bf5a1260
e795823 Autoformat TempDirUtils.qll smowton Apr 16, 2021 https://github.com/github/codeql/pull/4388/commits/e795823d972c0f585b55a69f273dd6bfb761f8a7
a8d25b6 Apply suggestions from code review JLLeitschuh Apr 16, 2021 https://github.com/github/codeql/pull/4388/commits/a8d25b63ac8ba523b7901207298126db9234d07e
a4b5573 Apply suggestions from code review JLLeitschuh Apr 19, 2021 https://github.com/github/codeql/pull/4388/commits/a4b5573f5328ac0a41319c7ca6dae59b4986dfa3
f7a4aac Apply suggestions from code review JLLeitschuh Apr 20, 2021 https://github.com/github/codeql/pull/4388/commits/f7a4aac52586f051db45cc71314da4465b31c6cf
d5c9af3 Fixup documentation/code from PR feedback JLLeitschuh Apr 20, 2021 https://github.com/github/codeql/pull/4388/commits/d5c9af31b224d7ca62985ce8d2359ab5e3b195b7
79db76d Fix test failures TempDirLocalInformationDisclosureFromSystemProperty JLLeitschuh Apr 21, 2021 https://github.com/github/codeql/pull/4388/commits/79db76dcf8717f11fae353bdfc37079d27b1b104
0a621c2 Fix the formatting in TempDirLocalInformationDisclosureFromMethodCall JLLeitschuh Apr 26, 2021 https://github.com/github/codeql/pull/4388/commits/0a621c2801565e5da810fee581de7a05918f9dea
9299c79 Add information disclosure test fix suggestions JLLeitschuh Jan 28, 2022 https://github.com/github/codeql/pull/4388/commits/9299c7996db0d64b81d3448f6e55172db8af05b6
0268dd9 Add file creation sanitizer JLLeitschuh Feb 1, 2022 https://github.com/github/codeql/pull/4388/commits/0268dd9f0ab5f0fe9ade5fdbbf7ae5f4c6714812
1f47ea5 Update to new change note format JLLeitschuh Feb 4, 2022 https://github.com/github/codeql/pull/4388/commits/1f47ea51640a602e4b05351428c683f07d2c282d
de38638 Combine CWE-200 queries smowton Feb 7, 2022 https://github.com/github/codeql/pull/4388/commits/de38638db61ec4dae3c64913497e9c36ae491fd0
c4112e6 Post refactor fixiup JLLeitschuh Feb 7, 2022 https://github.com/github/codeql/pull/4388/commits/c4112e6d4ce043ab424205749996ea6bc1448503
7965459 Apply suggestions from code review smowton Feb 8, 2022 https://github.com/github/codeql/pull/4388/commits/79654592d92a5d9532b60affb3f41e1df0485383
a6596ea Fix test requirements, formatting smowton Feb 8, 2022 https://github.com/github/codeql/pull/4388/commits/a6596ea7ce6539809f5b72526abbcbb4b33bbc7e
7f46640 Consider calls to setReadable(false, false) then setReadable(true, tr… JLLeitschuh Feb 8, 2022 https://github.com/github/codeql/pull/4388/commits/7f466401762f8ec2884246fe7f5913ff29a9030a
787e3da Update java/ql/src/Security/CWE/CWE-200/TempDirLocalInformationDisclo… JLLeitschuh Feb 9, 2022 https://github.com/github/codeql/pull/4388/commits/787e3dac31c4d6fcf76354192328e3dee3a04148
49a7367 Fix FP from mkdirs call on exact temp directory JLLeitschuh Feb 9, 2022 https://github.com/github/codeql/pull/4388/commits/49a73673b64dd02e1581be5cbf13d5fbfc3ca330
bafcce1 Apply suggestions from code review JLLeitschuh Feb 10, 2022 https://github.com/github/codeql/pull/4388/commits/bafcce17d43064db7995948c03c24ad4a981ff94
eee521e Fix test failure for TempDirLocalInformationDisclosure JLLeitschuh Feb 10, 2022 https://github.com/github/codeql/pull/4388/commits/eee521e6cee2c649ad9f02d12e88c828b75ed901
7dee22a Fix implicit 'this' usage JLLeitschuh Feb 14, 2022 https://github.com/github/codeql/pull/4388/commits/7dee22a1302ae997d8d2ed62bb73c51ce4f1fb09
bb580dd Apply suggestions from code review JLLeitschuh Feb 14, 2022 https://github.com/github/codeql/pull/4388/commits/bb580ddbab7da0a1bca46d4a2bbb1e3a6c6b79f6
76964d5 Apply suggestions from code review JLLeitschuh Feb 14, 2022 https://github.com/github/codeql/pull/4388/commits/76964d58f23cef877e27e0aab1c3792cd33b0354
2048aed Review feedback and improve temp dir vulnerable/safe code sugestion JLLeitschuh Feb 14, 2022 https://github.com/github/codeql/pull/4388/commits/2048aed0a9dd5731ae9fd8eb4835b0bcfa0851ec
Clear filters https://github.com/github/codeql/pull/4388/files
Please reload this pagehttps://github.com/github/codeql/pull/4388/files
Please reload this pagehttps://github.com/github/codeql/pull/4388/files
StringFormat.qll https://github.com/github/codeql/pull/4388/files#diff-d4cae1e3dc5388fbde18f9ca4e51411bc0cc03160bd1dee60b9aca2945ddb65e
EJBRestrictions.qll https://github.com/github/codeql/pull/4388/files#diff-f17e9394505092b4b298c3e1a3549d865dc860f6dad6569ea4a240e24b87bde2
FileWritable.qll https://github.com/github/codeql/pull/4388/files#diff-31737aa470534bb4c4dc22d5300cd87ab1bf77c89c84ac06a38c4b3b08467342
TempDirLocalInformationDisclosure.qhelp https://github.com/github/codeql/pull/4388/files#diff-5eacc196c73272631012b8dfb28657bce0863735109f72ca441a5fd5c61e228b
TempDirLocalInformationDisclosure.ql https://github.com/github/codeql/pull/4388/files#diff-6d29e19010e83d1c9a9186af28fb2c8743a17540f12f15e006c4d7ee8e8efeb2
TempDirUsageSafe.java https://github.com/github/codeql/pull/4388/files#diff-be2ceb5ac70fbd2a009956e66232734ed5f2b907d2c377fdbe1160c5e72b745b
TempDirUsageVulnerable.java https://github.com/github/codeql/pull/4388/files#diff-7d0f5de2e79e4fe31805e18d6a55a166c56515cab231629450435ffbe3175ec5
TempDirUtils.qll https://github.com/github/codeql/pull/4388/files#diff-0188c0fb3eef6f8bb0eccd9371e1a126aaaec4d8d851bde07f576559a5f5f7ca
2022-02-04-local-temp-file-or-directory-information-disclosure.md https://github.com/github/codeql/pull/4388/files#diff-4cbf353384aa3e747233b3c4e87cdf10b3c5151752f96eb618c3d2e11aad3a71
Files.java https://github.com/github/codeql/pull/4388/files#diff-d0b37d96b8d66fa171a5d2145da2fc6758a29d39a7d33df34b5a8e7e2f1777e6
TempDirLocalInformationDisclosure.expected https://github.com/github/codeql/pull/4388/files#diff-f2f51b90009dbf4d61c3cde42778dc5826a11351c7c4edc7fdfe69a506782e64
TempDirLocalInformationDisclosure.qlref https://github.com/github/codeql/pull/4388/files#diff-3ce24dc0e347a48c87beacf1204fdb62a4ca969d4b4b5e5d43daf25746975f96
Test.java https://github.com/github/codeql/pull/4388/files#diff-5bd3840e93ec550ae6b38744db95e2dfa16eb6d3f1bda6d0b56f996ff172fe05
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/lib/semmle/code/java/StringFormat.qllhttps://github.com/github/codeql/pull/4388/files#diff-d4cae1e3dc5388fbde18f9ca4e51411bc0cc03160bd1dee60b9aca2945ddb65e
View file https://github.com/JLLeitschuh/ql/blob/2048aed0a9dd5731ae9fd8eb4835b0bcfa0851ec/java/ql/lib/semmle/code/java/StringFormat.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/4388/{{ revealButtonHref }}
https://github.com/github/codeql/pull/4388/files#diff-d4cae1e3dc5388fbde18f9ca4e51411bc0cc03160bd1dee60b9aca2945ddb65e
https://github.com/github/codeql/pull/4388/files#diff-d4cae1e3dc5388fbde18f9ca4e51411bc0cc03160bd1dee60b9aca2945ddb65e
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/lib/semmle/code/java/frameworks/javaee/ejb/EJBRestrictions.qllhttps://github.com/github/codeql/pull/4388/files#diff-f17e9394505092b4b298c3e1a3549d865dc860f6dad6569ea4a240e24b87bde2
View file https://github.com/JLLeitschuh/ql/blob/2048aed0a9dd5731ae9fd8eb4835b0bcfa0851ec/java/ql/lib/semmle/code/java/frameworks/javaee/ejb/EJBRestrictions.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/4388/{{ revealButtonHref }}
https://github.com/github/codeql/pull/4388/files#diff-f17e9394505092b4b298c3e1a3549d865dc860f6dad6569ea4a240e24b87bde2
https://github.com/github/codeql/pull/4388/files#diff-f17e9394505092b4b298c3e1a3549d865dc860f6dad6569ea4a240e24b87bde2
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/lib/semmle/code/java/security/FileWritable.qllhttps://github.com/github/codeql/pull/4388/files#diff-31737aa470534bb4c4dc22d5300cd87ab1bf77c89c84ac06a38c4b3b08467342
View file https://github.com/JLLeitschuh/ql/blob/2048aed0a9dd5731ae9fd8eb4835b0bcfa0851ec/java/ql/lib/semmle/code/java/security/FileWritable.qll
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/4388/{{ revealButtonHref }}
https://github.com/github/codeql/pull/4388/files#diff-31737aa470534bb4c4dc22d5300cd87ab1bf77c89c84ac06a38c4b3b08467342
https://github.com/github/codeql/pull/4388/files#diff-31737aa470534bb4c4dc22d5300cd87ab1bf77c89c84ac06a38c4b3b08467342
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/src/Security/CWE/CWE-200/TempDirLocalInformationDisclosure.qhelphttps://github.com/github/codeql/pull/4388/files#diff-5eacc196c73272631012b8dfb28657bce0863735109f72ca441a5fd5c61e228b
View file https://github.com/JLLeitschuh/ql/blob/2048aed0a9dd5731ae9fd8eb4835b0bcfa0851ec/java/ql/src/Security/CWE/CWE-200/TempDirLocalInformationDisclosure.qhelp
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/4388/{{ revealButtonHref }}
aibaarshttps://github.com/aibaars
Jan 29, 2021https://github.com/github/codeql/pull/4388/files#r566705323
Learn morehttps://docs.github.com/articles/managing-disruptive-comments/#hiding-a-comment
unix-likehttps://en.wikipedia.org/wiki/Unix-like
CVSSv3.1 base score of 6.2/10https://nvd.nist.gov/vuln-metrics/cvss/v3-calculator?vector=AV:L/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N&version=3.1
java.nio.file.Files#createTempDirectoryhttps://docs.oracle.com/javase/8/docs/api/java/nio/file/Files.html#createTempDirectory
java.nio.file.Files#createTempFilehttps://docs.oracle.com/javase/8/docs/api/java/nio/file/Files.html#createTempFile
java.nio.file.Files#createFilehttps://docs.oracle.com/javase/8/docs/api/java/nio/file/Files.html#createFile-java.nio.file.Path-java.nio.file.attribute.FileAttribute...-
java.nio.file.Files#createDirectoryhttps://docs.oracle.com/javase/8/docs/api/java/nio/file/Files.html#createDirectory-java.nio.file.Path-java.nio.file.attribute.FileAttribute...-
java.nio.file.Files#createDirectorieshttps://docs.oracle.com/javase/8/docs/api/java/nio/file/Files.html#createDirectories-java.nio.file.Path-java.nio.file.attribute.FileAttribute...-
Insecure Temporary Filehttps://owasp.org/www-community/vulnerabilities/Insecure_Temporary_File
FIO00-J. Do not operate on files in shared directorieshttps://wiki.sei.cmu.edu/confluence/display/java/FIO00-J.+Do+not+operate+on+files+in+shared+directories
CWE-200https://cwe.mitre.org/data/definitions/200.html
CWE-732https://cwe.mitre.org/data/definitions/732.html
Please reload this pagehttps://github.com/github/codeql/pull/4388/files
Please reload this pagehttps://github.com/github/codeql/pull/4388/files
Please reload this pagehttps://github.com/github/codeql/pull/4388/files
https://github.com/github/codeql/blob/main/CODEOWNERS#L16
java/ql/src/Security/CWE/CWE-200/TempDirLocalInformationDisclosure.qlhttps://github.com/github/codeql/pull/4388/files#diff-6d29e19010e83d1c9a9186af28fb2c8743a17540f12f15e006c4d7ee8e8efeb2
View file https://github.com/JLLeitschuh/ql/blob/2048aed0a9dd5731ae9fd8eb4835b0bcfa0851ec/java/ql/src/Security/CWE/CWE-200/TempDirLocalInformationDisclosure.ql
Open in desktop https://desktop.github.com
https://github.co/hiddenchars
https://github.com/github/codeql/pull/4388/{{ revealButtonHref }}
Please reload this pagehttps://github.com/github/codeql/pull/4388/files
https://github.com
Termshttps://docs.github.com/site-policy/github-terms/github-terms-of-service
Privacyhttps://docs.github.com/site-policy/privacy-policies/github-privacy-statement
Securityhttps://github.com/security
Statushttps://www.githubstatus.com/
Communityhttps://github.community/
Docshttps://docs.github.com/
Contacthttps://support.github.com?tags=dotcom-footer

Viewport: width=device-width

URLs of crawlers that visited me.