EPSS
Percentile
39.9%
Packwood MPXJ is vulnerable to arbitrary file write. The vulnerability exists because it does not properly validate the path from inputStream, leading to the writing of files outside of the target directory.
www.mpxj.org/changes-report.html#a8.3.5
github.com/joniles/mpxj/commit/8eaf4225048ea5ba7e59ef4556dab2098fcc4a1d
www.oracle.com/security-alerts/cpujan2021.html