CVE-2023-37476

🗓️ 17 Jul 2023 21:02:46Reported by GitHub_MType

cve🔗 web.nvd.nist.gov📰️ 4 Media mentions👁 80 Views

OpenRefine 3.7.3 Arbitrary Code Execution Vulnerability

Reporter	Title	Published	Views	Family All 32
Circl	CVE-2023-37476	2 Oct 202311:37	–	circl
CNNVD	OpenRefine 路径遍历漏洞	17 Jul 202300:00	–	cnnvd
Cvelist	CVE-2023-37476 Zip slip in OpenRefine	17 Jul 202321:02	–	cvelist
Debian CVE	CVE-2023-37476	17 Jul 202321:02	–	debiancve
EUVD	EUVD-2023-2096	3 Oct 202520:07	–	euvd
Github Security Blog	OpenRefine vulnerable to zip slip in project import	18 Jul 202318:47	–	github
NVD	CVE-2023-37476	17 Jul 202322:15	–	nvd
OpenVAS	Ubuntu: Security Advisory (USN-7260-1)	10 Feb 202500:00	–	openvas
OSV	CVE-2023-37476 Zip slip in OpenRefine	17 Jul 202321:02	–	osv
OSV	DEBIAN-CVE-2023-37476	17 Jul 202322:15	–	osv

NVD

Vulners

Node

openrefine openrefineRange≤3.7.3

[
  {
    "vendor": "OpenRefine",
    "product": "OpenRefine",
    "versions": [
      {
        "version": "< 3.7.4",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/OpenRefine/OpenRefine/security/advisories/GHSA-m88m-crr9-jvqq
github	www.github.com/OpenRefine/OpenRefine/commit/e9c1e65d58b47aec8cd676bd5c07d97b002f205e
github	www.github.com/OpenRefine/OpenRefine/releases/tag/3.7.4
sonarsource	www.sonarsource.com/blog/openrefine-zip-slip