MPXJ has a Potential Path Traversal Vulnerability

🗓️ 28 Oct 2024 18:30:32Reported by GitHub Advisory DatabaseType

MPXJ Path Traversal Vulnerability, Patch 13.5.

Reporter	Title	Published	Views	Family All 42
IBM Security Bulletins	Security Bulletin:IBM TRIRIGA Application Platform discloses CVE-2020-25020	30 Aug 202216:41	–	ibm
BDU FSTEC	MPXJ common/InputStreamHelper Java Write File	23 Feb 202100:00	–	bdu_fstec
Circl	CVE-2020-35460	28 Oct 202418:40	–	circl
Circl	CVE-2024-49771	28 Oct 202417:03	–	circl
CNNVD	Packwood MPXJ Path Traversal Vulnerability	14 Dec 202000:00	–	cnnvd
CNNVD	MPXJ path traversal vulnerability	28 Oct 202400:00	–	cnnvd
CVE	CVE-2020-35460	14 Dec 202022:48	–	cve
CVE	CVE-2024-49771	28 Oct 202416:57	–	cve
Cvelist	CVE-2020-35460	14 Dec 202022:48	–	cvelist
Cvelist	CVE-2024-49771 MPXJ has a Potential Path Traversal Vulnerability	28 Oct 202416:57	–	cvelist

Vulners

Node

mpxj.netRange13.0.0–13.5.1nuget

net.sf.mpxj-for-vbRange8.3.5–13.5.1nuget

net.sf.mpxj-for-csharpRange8.3.5–13.5.1nuget

net.sf.mpxjRange8.3.5–13.5.1nuget

mpxj mpxjRange8.3.5–13.5.1pip

mpxj mpxjRange8.3.5–13.5.1rubygems

net.sf.mpxj mpxjRange8.3.5–13.5.1maven

Source	Link
github	www.github.com/joniles/mpxj/security/advisories/GHSA-j945-c44v-97g6
github	www.github.com/joniles/mpxj/commit/8002802890dfdc8bc74259f37e053e15b827eea0
nvd	www.nvd.nist.gov/vuln/detail/CVE-2024-49771
github	www.github.com/rubysec/ruby-advisory-db/blob/master/gems/mpxj/CVE-2024-49771.yml
github	www.github.com/advisories/GHSA-j945-c44v-97g6

30 Oct 2024 14:35Current

6.6Medium risk

Vulners AI Score6.6

CVSS 25

CVSS 3.15.3

EPSS0.01864

SSVC