René's URL Explorer Experiment

Title: Java: CWE-378: Temp Directory Hijacking Race Condition Vulnerability by JLLeitschuh · Pull Request #4473 · github/codeql · GitHub

Open Graph Title: Java: CWE-378: Temp Directory Hijacking Race Condition Vulnerability by JLLeitschuh · Pull Request #4473 · github/codeql

X Title: Java: CWE-378: Temp Directory Hijacking Race Condition Vulnerability by JLLeitschuh · Pull Request #4473 · github/codeql

Description: On Unix-like systems, the temporary directory is shared with all users on the system. As such, improperly writing to the system temporary directory can allow attackers to hijack temporary directory resources. static File vulnerable() { // Attacker sees file creation in temporary directory File temp = File.createTempFile("test", "directory"); // Attacker observes temporary file deletion temp.delete(); // 🏁 Race condition here // Attacker races to create the directory with more permissive permissions temp.mkdir(); // mkdir response code not checked. If attacker created directory, would return `false` not fail. return temp; // File could be hijacked }

Open Graph Description: On Unix-like systems, the temporary directory is shared with all users on the system. As such, improperly writing to the system temporary directory can allow attackers to hijack temporary directory...

X Description: On Unix-like systems, the temporary directory is shared with all users on the system. As such, improperly writing to the system temporary directory can allow attackers to hijack temporary directory...

Opengraph URL: https://github.com/github/codeql/pull/4473

X: @github

direct link

Domain: github.com

Links:

Viewport: width=device-width