Skip to content
OpenAdvisories

Package · Maven

org.openrefine:main

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

4 results · Feed

  • High 7.6
    CVE-2024-47879

    OpenRefine's PreviewExpressionCommand, which is eval, lacks protection against cross-site request forgery (CSRF)

    OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, lack of cross-site request forgery protection on the `preview-expression` command means that visiting a malicious website could cause an attacker-controlled expression…

    OpenRefine OpenRefine openrefine openrefine Debian Ubuntu Maven
  • Medium 6.5
    CVE-2022-41401 Public exploit

    OpenRefine Server-Side Request Forgery vulnerability

    OpenRefine <= v3.5.2 contains a Server-Side Request Forgery (SSRF) vulnerability, which permits unauthorized users to exploit the system, potentially leading to unauthorized access to internal resources and sensitive file disclosure.

    openrefine openrefine org.openrefine:main Debian Ubuntu Maven
  • Medium 5.5
    CVE-2023-37476

    Zip slip in OpenRefine

    OpenRefine is a free, open source tool for data processing. A carefully crafted malicious OpenRefine project tar file can be used to trigger arbitrary code execution in the context of the OpenRefine process if a user can be convinced to import it. The vulnera…

    OpenRefine OpenRefine openrefine openrefine Debian Ubuntu Maven
  • Medium 6.5
    CVE-2018-19859 Public exploit

    OpenRefine Directory Traversal

    OpenRefine before 3.2 beta allows directory traversal via a relative pathname in a ZIP archive.

    org.openrefine:main Maven