{"id":"CVE-2018-25068","details":"A vulnerability has been found in devent globalpom-utils up to 4.5.0 and classified as critical. This vulnerability affects the function createTmpDir of the file globalpomutils-fileresources/src/main/java/com/anrisoftware/globalpom/fileresourcemanager/FileResourceManagerProvider.java. The manipulation leads to insecure temporary file. The attack can be initiated remotely. Upgrading to version 4.5.1 is able to address this issue. The patch is identified as 77a820bac2f68e662ce261ecb050c643bd7ee560. It is recommended to upgrade the affected component. VDB-217570 is the identifier assigned to this vulnerability.","aliases":["GHSA-jjvp-wfp8-rv69"],"modified":"2026-07-08T20:14:26.625400Z","published":"2023-01-06T21:15:09.243Z","references":[{"type":"ADVISORY","url":"https://github.com/devent/globalpom-utils/releases/tag/globalpomutils-4.5.1"},{"type":"ADVISORY","url":"https://vuldb.com/?ctiid.217570"},{"type":"ADVISORY","url":"https://vuldb.com/?id.217570"},{"type":"FIX","url":"https://github.com/devent/globalpom-utils/commit/77a820bac2f68e662ce261ecb050c643bd7ee560"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/devent/globalpom-utils","events":[{"introduced":"0"},{"fixed":"6438a4b9f14ee63f2566ec2cb641e2d52d308ad5"},{"fixed":"77a820bac2f68e662ce261ecb050c643bd7ee560"}],"database_specific":{"source":["CPE_RANGE","REFERENCES"],"cpe":"cpe:2.3:a:globalpom-utils_project:globalpom-utils:*:*:*:*:*:*:*:*","extracted_events":[{"introduced":"0"},{"fixed":"4.5.1"}]}}],"versions":["globalpomutils-bundle-4.5.0","v3.1","v3.0","v2.15","v2.14","v2.13","v2.11","v2.10","v2.9","v2.8","v2.7","v2.3","v2.2","v2.1.1","v2.1","v2.0","v1.10","v1.9","v1.8","v1.7","v1.6","v1.5","v1.4","v1.3","v1.2","v1.1","v1.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2018-25068.json","vanir_signatures_modified":"2026-07-08T20:14:26Z","vanir_signatures":[{"signature_type":"Function","signature_version":"v1","source":"https://github.com/devent/globalpom-utils/commit/77a820bac2f68e662ce261ecb050c643bd7ee560","target":{"file":"globalpomutils-fileresources/src/main/java/com/anrisoftware/globalpom/fileresourcemanager/FileResourceManagerProvider.java","function":"createTmpDir"},"deprecated":false,"digest":{"function_hash":"84229726894777340699044268448188192917","length":239},"id":"CVE-2018-25068-114def0f"},{"deprecated":false,"digest":{"line_hashes":["88290217327778045309050027191946172388","18414848838629691174429947984153557708","138825015292840322050779026556945496236","231741064359557884397316079855347578350","102566426138427077035391090110980672137","290304104038223967751789871262128890612","137866849455622343811153875843367323616","59950069051792622156846181451761832997","307358226936807674429660363269699222156","222943231734779551339442667532982094525","149036711585212651702213972629622825110","184841883262719632519926516196069729316","184262126532646029261903379619827314050","122966875157035158281527593941388120528","104437781914653239512162060053254238281","63843640065773797098437691836208255900","166369586335516587268501694957801230444","102735163476330816635289379510122099138","273342837600823421935958127866370197922","131651696873212096877725819641375670005","43672951932935489502635105322405988756","270572126965453867071103707899231072150","182047928592491653491889954086057954797","257901579429278303195650120020380794109","159748949306459918236349040656511988669","231353665024402427377851217359073369002","283917438485925267382920083196035436467","209637764133780555450552534977144373611","144600598161039991766535065730780646143","278399893399977175072837610737059178428","194229624672100806073248336215197840136","90089475306357272900524198046051413326","68131604921087348443443006355370948799","129991541678240835245251953841968460817","254736607076884080981359495565091545377","334499072583976251470535580415941024515","60265954627522682977227143280387408195","127575719805860918954305135332432248489","202574459385804128373444440722773718254","143232187153103251393204724195337865256","3156580960312123075635712018643287119","235308816467583513617916007982146036375","127973331681917195321873947071958361779","266157689724307653900958759012727593075","291607015331871110119228361091544173450","139020543883858462827462880435550949971","168832805321776338711015264084152386547"],"threshold":0.9},"id":"CVE-2018-25068-6f832a33","signature_type":"Line","signature_version":"v1","source":"https://github.com/devent/globalpom-utils/commit/77a820bac2f68e662ce261ecb050c643bd7ee560","target":{"file":"globalpomutils-fileresources/src/main/java/com/anrisoftware/globalpom/fileresourcemanager/FileResourceManagerProvider.java"}}]}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H"}]}