CVE-2020-35460

Publication date

2020-12-14 22:48:19

Family

mitre

State

PUBLISHED

Description

common/InputStreamHelper.java in Packwood MPXJ before 8.3.5 allows directory traversal in the zip stream handler flow, leading to the writing of files to arbitrary locations.