Lucene search
Debian Security Bug TrackerDEBIANCVE:CVE-2023-41886HistorySep 15, 2023 - 9:15 p.m.
CVE-2023-41886
2023-09-1521:15:11
Debian Security Bug Tracker
security-tracker.debian.org
3
openrefine
3.7.5
arbitrary file read
vulnerability
fix
unix
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
36.8%
OpenRefine is a powerful free, open source tool for working with messy data. Prior to version 3.7.5, an arbitrary file read vulnerability allows any unauthenticated user to read a file on a server. Version 3.7.5 fixes this issue.
| OS | Version | Architecture | Package | Version | Filename |
|---|---|---|---|---|---|
| Debian | 12 | all | openrefine | < 3.6.2-2+deb12u2 | openrefine_3.6.2-2+deb12u2_all.deb |
| Debian | 999 | all | openrefine | < 3.7.5-1 | openrefine_3.7.5-1_all.deb |
| Debian | 13 | all | openrefine | < 3.7.5-1 | openrefine_3.7.5-1_all.deb |
Related
cve
cve
CVE-2023-41886
2023-09-15 21:15:11
osv
osv
CVE-2023-41886
2023-09-15 21:15:11
ubuntucve
ubuntucve
CVE-2023-41886
2023-09-15 00:00:00
cvelist
cvelist
prion
prion
Design/Logic Flaw
2023-09-15 21:15:00
github
github
veracode
veracode
Arbitrary File Read
2023-09-14 08:15:09
nvd
nvd
CVE-2023-41886
2023-09-15 21:15:11
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
36.8%
Related for DEBIANCVE:CVE-2023-41886