Information Disclosure

2022-11-2903:35:53

Veracode Vulnerability Database

sca.analysiscenter.veracode.com

mpxj

information disclosure

temporary files

0.0004 Low

EPSS

Percentile

5.1%

JSON

mpxj is vulnerable to information disclosure. A local authenticated attacker is able to read the contents of temporary files or directories when File.createTempFile(..) is used to create those files, resulting in disclosure of sensitive information.

CPENameOperatorVersion
mpxjle10.14.0
mpxjle7.2.1
mpxjle10.14.0
net.sf.mpxjle10.14.0
net.sf.mpxjle7.2.1
net.sf.mpxj-for-csharple10.14.0
net.sf.mpxj-for-csharple7.2.1
net.sf.mpxj-for-vble10.14.0
net.sf.mpxj-for-vble7.2.1
mpxjle10.14.0

Name	Operator	Version
mpxj	le	10.14.0
mpxj	le	7.2.1
mpxj	le	10.14.0
net.sf.mpxj	le	10.14.0
net.sf.mpxj	le	7.2.1
net.sf.mpxj-for-csharp	le	10.14.0
net.sf.mpxj-for-csharp	le	7.2.1
net.sf.mpxj-for-vb	le	10.14.0
net.sf.mpxj-for-vb	le	7.2.1
mpxj	le	10.14.0