net.sf.mpxj:mpxj@12.9.0 vulnerabilities
latest version
13.9.0
latest non vulnerable version
first published
10 years ago
latest version published
1 months ago
licenses detected
- [7.6.0,)
package manager
Direct Vulnerabilities
Known vulnerabilities in the net.sf.mpxj:mpxj package. This does not include vulnerabilities belonging to this package’s dependencies.
How to fix?
Automatically find and fix vulnerabilities affecting your projects. Snyk scans for vulnerabilities and provides fixes for free.
Fix for free| Vulnerability | Vulnerable Version |
|---|---|
net.sf.mpxj:mpxj is a Library that provides facilities to allow project information to be manipulated in Java and .Net. Affected versions of this package are vulnerable to Directory Traversal due to improper handling of zip files. An attacker can write files to arbitrary locations by constructing a malicious path that bypasses the security fix in CVE-2020-35460. How to fix Directory Traversal? Upgrade | [8.3.5,13.5.1) |