Vulnerabilities affecting this package (0)
| Vulnerability |
Summary |
Fixed by |
|
This package is not known to be affected by vulnerabilities.
|
Vulnerabilities fixed by this package (1)
| Vulnerability |
Summary |
Aliases |
|
VCID-xetz-8e2k-xya5
|
MPXJ has a Potential Path Traversal Vulnerability
### Impact
The patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the original fix and allow files to be written to arbitrary locations.
### Patches
The issue is addressed in MPXJ version 13.5.1
### Workarounds
Do not pass zip files to MPXJ.
### References
N/A
### Credits
Issue report and patch provided by yyjLF and sprinkle
|
CVE-2024-49771
GHSA-j945-c44v-97g6
|