CVE-2022-41954
Published Nov 25, 2022MPXJ is an open source library to read and write project plans from a variety of file formats and databases. On Unix-like operating systems (not Windows or macos), MPXJ's use of `…
Vendor/product archive
mpxj / mpxj CVEs
Beta · best-effort3 CVEs tagged to mpxj / mpxj — 1 Critical, 0 High, 1 Medium, 1 Low, 0 Unrated.
CVE-2020-35460
Published Dec 14, 2020common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, leading to the writing of files to arbitrary locations.
CVE-2020-25020
Published Aug 29, 2020MPXJ through 8.1.3 allows XXE attacks. This affects the GanttProjectReader and PhoenixReader components.
Showing 1-3 of 3 CVEsPage 1 of 1