Improper Restriction of XML External Entity Reference in MPXJ

Description

References

• nvd.nist.gov/vuln/detail/CVE-2020-25020 · ADVISORY
• joniles/mpxj#178 · WEB
• joniles/mpxj · PACKAGE
• joniles/mpxj release v8.1.4 · WEB
• oracle.com/security-alerts/cpujan2021.html · WEB

Altre vulnerabilità di net.sf.mpxj:mpxj

• CVE-2026-65829MEDIO 5.3MPXJ is an open source library to read and write project plans from a variety of file formats and databases. From 7.3.0 until 16.5.0, readin…
• CVE-2026-61570ALTO 7.5MPXJ is an open source library to read and write project plans from a variety of file formats and databases. From 5.5.5 until 16.4.1, Merlin…
• CVE-2024-49771MEDIO 5.3MPXJ is an open source library to read and write project plans from a variety of file formats and databases. The patch for the historical vu…
• CVE-2022-41954BASSO 3.3MPXJ is an open source library to read and write project plans from a variety of file formats and databases. On Unix-like operating systems …
• CVE-2020-35460MEDIO 5.3common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, leading to the writin…