{"action":"Upgrade net.sf.mpxj:mpxj to 8.3.5 or later.","affected":[{"fixed":"8.3.5","introduced":"0"}],"component":"net.sf.mpxj:mpxj","cve_ids":["CVE-2020-35460"],"ecosystem":"Maven","epss":0.01864,"exploited":false,"fixed_versions":["8.3.5"],"ghsa_id":"GHSA-p9j6-4pjr-gp48","id":"tcs_01M5N974KJXV83XY1PV1KE6KQQ","modified_at":"2023-11-08T04:03:33.621104Z","published_at":"2020-12-18T18:28:23Z","references":["https://osv.dev/vulnerability/GHSA-p9j6-4pjr-gp48","https://nvd.nist.gov/vuln/detail/CVE-2020-35460","https://github.com/joniles/mpxj/commit/8eaf4225048ea5ba7e59ef4556dab2098fcc4a1d","https://www.oracle.com/security-alerts/cpujan2021.html","http://www.mpxj.org/changes-report.html#a8.3.5"],"severity":{"label":"medium","score":5.3},"sources":[{"source":"osv","source_id":"GHSA-p9j6-4pjr-gp48","url":"https://osv.dev/vulnerability/GHSA-p9j6-4pjr-gp48"}],"summary":"MPXJ path Traversal vulnerability"}