Skip to content
OpenAdvisories

Package · Maven

org.openrefine.dependencies:butterfly

2 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium —
    GHSA-mpcw-3j5p-p99x

    Butterfly's parseJSON, getJSON functions eval malicious input, leading to remote code execution (RCE)

    ### Summary Usage of the `Butterfly.prototype.parseJSON` or `getJSON` functions on an attacker-controlled crafted input string allows the attacker to execute arbitrary JavaScript code on the server. Since Butterfly JavaScript code has access to Java classes, …

    org.openrefine.dependencies:butterfly Maven