Skip to content
OpenAdvisories

Package · Maven

org.openrefine:main

4 known vulnerabilities.

2 results · Clear filters · Feed

  • Medium 6.5
    CVE-2022-41401 Public exploit

    OpenRefine Server-Side Request Forgery vulnerability

    OpenRefine <= v3.5.2 contains a Server-Side Request Forgery (SSRF) vulnerability, which permits unauthorized users to exploit the system, potentially leading to unauthorized access to internal resources and sensitive file disclosure.

  • Medium 6.5
    CVE-2018-19859 Public exploit

    OpenRefine Directory Traversal

    OpenRefine before 3.2 beta allows directory traversal via a relative pathname in a ZIP archive.