Maven/net.sf.mpxj:mpxj CVE-2024-49771: medium 5.3, EPSS 0.48%
MPXJ has a Potential Path Traversal Vulnerability
Action: Upgrade net.sf.mpxj:mpxj to 13.5.1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 8.3.5 | 13.5.1 | - |
Fixed versions
| 13.5.1 |
Sources
- osv: GHSA-j945-c44v-97g6#Maven/net.sf.mpxj:mpxj
- https://github.com/joniles/mpxj/security/advisories/GHSA-j945-c44v-97g6
- https://nvd.nist.gov/vuln/detail/CVE-2024-49771
- https://github.com/joniles/mpxj/commit/8002802890dfdc8bc74259f37e053e15b827eea0
- https://github.com/joniles/mpxj
- https://github.com/rubysec/ruby-advisory-db/blob/master/gems/mpxj/CVE-2024-49771.yml
CVE-2024-49771 · published · modified · JSON