MPXJ is an open source library to read and write project plans from a variety of file formats and databases. On Unix-like operating systems (not Windows or macos), MPXJ's use of File.createTempFile(..) results in temporary files being created with the permissions -rw-r--r--. This means that any...
3.3CVSS
3.7AI Score
0.0004EPSS
common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, leading to the writing of files to arbitrary...
5.3CVSS
5.6AI Score
0.001EPSS
MPXJ through 8.1.3 allows XXE attacks. This affects the GanttProjectReader and PhoenixReader...
9.8CVSS
9.3AI Score
0.002EPSS