~ / search / GHSA-wcp5-m52f-mhh5

GHSA-wcp5-m52f-mhh5

Improper Restriction of XML External Entity Reference in MPXJ

Source: GitHub Advisory Database (reviewed) Critical CVE-2020-25020

Packages

EcosystemPackageAffectedFixed in
Maven net.sf.mpxj:mpxj < 8.1.4 8.1.4

Details

As written in the advisory (Markdown source, shown as plain text).

"MPXJ through 8.1.3 allows XXE attacks. This affects the GanttProjectReader and PhoenixReader components."

References

External links from the advisory. They lead to third-party sites.