PT-2020-5496 · Packwood · Mpxj

Published 2020-12-14 · Updated 2024-10-28 · CVE-2020-35460

Positive Technologies (AI Summary)

CVSS v3.1

5.3

Medium

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

Name of the Vulnerable Software and Affected Versions Packwood MPXJ versions prior to 8.3.5

Description The issue exists due to incorrect restriction of the directory path name in the common/InputStreamHelper.java library of MPXJ, allowing a remote attacker to write files to arbitrary locations through directory traversal in the zip stream handler flow.

Recommendations For versions prior to 8.3.5, update to version 8.3.5 or later to resolve the issue. As a temporary workaround, consider restricting access to the common/InputStreamHelper.java library to minimize the risk of exploitation.

Fix

Path traversal

Weakness Enumeration

CWE-22

Related Identifiers

BDU:2021-00877

CVE-2020-35460

GHSA-P9J6-4PJR-GP48

Affected Products

Mpxj

References · 10

• https://github.com/joniles/mpxj/commit/8eaf4225048ea5ba7e59ef4556dab2098fcc4a1d · Patch
• http://mpxj.org/changes-report.html#a8.3.5 · Vendor Advisory
• https://oracle.com/security-alerts/cpujan2021.html · Patch
• https://nvd.nist.gov/vuln/detail/CVE-2020-35460 · Security Note
• https://bdu.fstec.ru/vul/2021-00877 · Security Note
• https://osv.dev/vulnerability/CVE-2020-35460 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-p9j6-4pjr-gp48 · Vendor Advisory
• https://t.me/cvedetector/9141 · Telegram Post
• https://cert-portal.siemens.com/productcert/html/ssa-137900.html · Note
• https://t.me/cvenotify/7181 · Telegram Post