CVE-2020-35460

Description

common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, leading to the writing of files to arbitrary locations.

Risk Information

Base Score

5.3

MODERATE

Vector

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:L/A:N

EPSS Score

Exploitation Probability

0.476

Associated Vulnerability

Vulnerability	OS Platform
Vulnerabilities CVE-2020-35460 are fixed in MPXJ-mpxj 8.3.5	Windows
Vulnerabilities CVE-2020-35460 are fixed in MPXJ-mpxj for Linux 8.3.5	Linux

Patch Details

No records found

References

https://nvd.nist.gov/vuln/detail/CVE-2023-1234
https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-1234