CVE-2024-5300: Insecure Temp File Creation
Constructing temporary files manually using random strings is vulnerable to predictable temp file collision attacks (Insecure Temporary File). An attacker who can predict the target path and pseudorandom component can pre-create the file and trigger Denial of Service or unauthorized access. Use standard secure temp file creation utilities like `os.CreateTemp
Gogreprules fetch cve-2024-5300-insecure-temp-file-creation --engine opengrepDescription
Constructing temporary files manually using random strings is vulnerable to predictable temp file collision attacks (Insecure Temporary File). An attacker who can predict the target path and pseudorandom component can pre-create the file and trigger Denial of Service or unauthorized access. Use standard secure temp file creation utilities like `os.CreateTemp
Community feedback
0 rule-level signals from signed-in users.
- Useful reports
- 0
- Context false positives
- 0
- Metadata suggestions
- 0
Contextual precision
Aggregated from approved scan feedback. False-positive reports describe observed scan contexts, not a global rule verdict.
- Findings observed
- 0
- Projects
- 0
- Reporters
- 0
Precision details are collecting more signed-in reports before verdict counts or ratios are emphasized.
No approved finding verdicts yet.
No scan diagnostics reported yet.