Lucene search
HistorySep 15, 2023 - 9:15 p.m.
CVE-2023-41886
openrefine
version 3.7.5
arbitrary file read vulnerability
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
36.8%
OpenRefine is a powerful free, open source tool for working with messy data. Prior to version 3.7.5, an arbitrary file read vulnerability allows any unauthenticated user to read a file on a server. Version 3.7.5 fixes this issue.
Affected configurations
Node
openrefineopenrefineRange<3.7.5
Related
cve
cve
CVE-2023-41886
2023-09-15 21:15:11
osv
osv
CVE-2023-41886
2023-09-15 21:15:11
debiancve
debiancve
CVE-2023-41886
2023-09-15 21:15:11
ubuntucve
ubuntucve
CVE-2023-41886
2023-09-15 00:00:00
cvelist
cvelist
prion
prion
Design/Logic Flaw
2023-09-15 21:15:00
github
github
veracode
veracode
Arbitrary File Read
2023-09-14 08:15:09
7.5 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
UNCHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N
0.001 Low
EPSS
Percentile
36.8%
Related for NVD:CVE-2023-41886