Description
MPXJ through 8.1.3 allows XXE attacks. This affects the GanttProjectReader and PhoenixReader components.
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | net.sf.mpxj:mpxj | < 8.1.4 | 8.1.4 | GHSA-wcp5-m52f-mhh5 |
Advisories 2
- ICSA-23-320-09 Siemens COMOS CISA ICS & IT advisories · Nov 14, 2023
- SSA-137900 SSA-137900: Multiple Vulnerabilities in COMOS Siemens ProductCERT · Nov 14, 2023