Skip to content
OpenAdvisories

Package · Maven

org.openrefine:openrefine

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 5.9
    CVE-2024-47882

    OpenRefine's error page lacks escaping, leading to potential Cross-site Scripting on import of malicious project

    OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the built-in "Something went wrong!" error page includes the exception message and exception traceback without escaping HTML tags, enabling injection into the page if …

    OpenRefine OpenRefine openrefine openrefine Debian Ubuntu Maven