Skip to content
OpenAdvisories

Package · Maven

org.openrefine:extensions

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Feed

  • High 8.1
    CVE-2024-47878

    Reflected cross-site scripting vulnerability (XSS) in GData extension (authorized.vt)

    OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the `/extension/gdata/authorized` endpoint includes the `state` GET parameter verbatim in a `<script>` tag in the output, so without escaping. An attacker could lead o…

    OpenRefine OpenRefine openrefine openrefine Debian Ubuntu Maven