Skip to content
OpenAdvisories

Vendor

joniles

4 known vulnerabilities.

Products

2 results · Clear filters · Feed

  • Medium 5.3

    MPXJ: Potential Path Traversal Vulnerability in Primavera P3 PRX and SureTrak STX readers

    MPXJ is an open source library to read and write project plans from a variety of file formats and databases. From 7.3.0 until 16.5.0, reading a suitably crafted Primavera P3 PRX or SureTrak STX file can cause MPXJ to write files to arbitrary locations in the …

  • Medium 5.3

    MPXJ has a Potential Path Traversal Vulnerability

    MPXJ is an open source library to read and write project plans from a variety of file formats and databases. The patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constru…