CVE-2019-3580

2019-01-0301:29:00

Google

osv.dev

6.9 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.2%

JSON

OpenRefine through 3.1 allows arbitrary file write because Directory Traversal can occur during the import of a crafted project file.

CPENameOperatorVersion
openrefineeq2.6-rc.2
openrefineeq2.6-alpha.2
openrefineeq2.6-alpha1
openrefineeq2.6-rc1
openrefineeq2.7-rc.2
openrefineeq3.0-beta
openrefineeq3.1
openrefineeq2.8
openrefineeq2.6-beta.1
openrefineeq3.0

Name	Operator	Version
openrefine	eq	2.6-rc.2
openrefine	eq	2.6-alpha.2
openrefine	eq	2.6-alpha1
openrefine	eq	2.6-rc1
openrefine	eq	2.7-rc.2
openrefine	eq	3.0-beta
openrefine	eq	3.1
openrefine	eq	2.8
openrefine	eq	2.6-beta.1
openrefine	eq	3.0

Rows per page:

1-10 of 151

References

github.com/OpenRefine/OpenRefine/issues/1927