Tag

file-permissions

Safeguard articles tagged "file-permissions" — guides, analysis, and best practices for software supply chain and application security.

1 article

Security

CVE-2023-34042: How the Spring Security XSD Permission Flaw Works

CVE-2023-34042 is a world-writable file permission issue in Spring Security's config JAR. Here is what actually breaks, who is affected, and how to remediate it.

Mar 11, 20256 min read