Vulnerabilities

TI-2022-20295 CVE-2022-41954 · GHSA-jf2p-4gqj-849g

Temporary File Information Disclosure Vulnerability

LOW 15

MPXJ is an open source library to read and write project plans from a variety of file formats and databases.

CVSS 3.1LOW 3.3 Local Low privileges No interaction EPSS 0.00215 Published 2022-11-25 Fixed in 10.14.1 CWE-200

TI-2020-17989 CVE-2020-35460 · GHSA-p9j6-4pjr-gp48

common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in…

LOW 34

common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, leading to the writing of files to arbitrary locations.

CVSS 3.1MEDIUM 5.3 Network No auth No interaction EPSS 0.01864 Published 2020-12-14 Fixed in 8.3.5 CWE-22

TI-2020-15287 CVE-2020-25020 · GHSA-wcp5-m52f-mhh5

MPXJ through 8.1.3 allows XXE attacks.

MEDIUM 54

MPXJ through 8.1.3 allows XXE attacks.

CVSS 3.1CRITICAL 9.8 Network No auth No interaction EPSS 0.02591 Published 2020-08-29 Fixed in 8.1.4 CWE-611

Vulnerabilities

Filters

Temporary File Information Disclosure Vulnerability

common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in…

MPXJ through 8.1.3 allows XXE attacks.