CVE-2024-47883

🗓️ 24 Oct 2024 20:39:53Reported by GitHub_MType

The MIT Simile Butterfly server in OpenRefine is vulnerable to multiple security weaknesses before version 1.2.6, allowing potential file access, path traversal, server-side request forgery, cross-site scripting, and remote code execution by an attacker

Reporter	Title	Published	Views	Family All 19
Information Security Automation	November Linux Patch Wednesday	20 Nov 202422:15	–	avleonov
Circl	CVE-2024-47883	24 Oct 202404:46	–	circl
CNNVD	Butterfly 安全漏洞	24 Oct 202400:00	–	cnnvd
Cvelist	CVE-2024-47883 Butterfly has path/URL confusion in resource handling leading to multiple weaknesses	24 Oct 202420:39	–	cvelist
Debian CVE	CVE-2024-47883	24 Oct 202420:39	–	debiancve
EUVD	EUVD-2024-2918	3 Oct 202520:07	–	euvd
Github Security Blog	Butterfly has path/URL confusion in resource handling leading to multiple weaknesses	24 Oct 202418:16	–	github
NVD	CVE-2024-47883	24 Oct 202421:15	–	nvd
OSV	CVE-2024-47883 Butterfly has path/URL confusion in resource handling leading to multiple weaknesses	24 Oct 202420:39	–	osv
OSV	DEBIAN-CVE-2024-47883	24 Oct 202421:15	–	osv

NVD

Vulners

Vulnrichment

Node

openrefine butterflyRange≤1.2.6

[
  {
    "vendor": "OpenRefine",
    "product": "simile-butterfly",
    "versions": [
      {
        "version": "< 1.2.6",
        "status": "affected"
      }
    ]
  }
]

Source	Link
github	www.github.com/OpenRefine/simile-butterfly/commit/537f64bfa72746f8b21d4bda461fad843435319c
github	www.github.com/OpenRefine/simile-butterfly/security/advisories/GHSA-3p8v-w8mr-m3x8

29 Oct 2024 15:38Current

9.4High risk

Vulners AI Score9.4

CVSS 3.19.1

EPSS0.03032

SSVC

openrefine mit simile butterfly security weaknesses version 1.2.6 file access path traversal server-side request forgery cross-site scripting remote code execution.