Insecure Temporary File

CVE-2023-2800

Medium

4.7/10

Summary

The package transformers is vulnerable to Insecure Temporary File prior to 4.30.0.

Attack Complexity: HIGH
Attack Vector: LOCAL
Integrity Impact: NONE
Scope: UNCHANGED
User Interaction: NONE
Privileges Required: LOW
Confidentiality Impact: NONE
Availability Impact: HIGH

CWE-377 - Insecure Temporary File

Creating and using insecure temporary files can leave application and system data vulnerable to attack.

References

Advisory Timeline

Published May 18, 2023