VULNERABILITY INTELLIGENCE

CVE-2024-49771

CVSS score5.3 MEDIUM

EPSS probability1.86%

CISA KEVNot currently listed

Published2024-10-28

Last modified2026-06-17

Description

MPXJ is an open source library to read and write project plans from a variety of file formats and databases. The patch for the historical vulnerability CVE-2020-35460 in MPXJ is incomplete as there is still a possibility that a malicious path could be constructed which would not be picked up by the …