EUVD-2024-0538

Malicious code in bioql PyPI...

CVE-2024-23833: Improper Limitation of a Pathname to a Restricted Directory

OpenRefine is a free, open source power tool for working with messy data and improving it. A jdbc attack vulnerability exists in OpenRefineversion=3.7.7 where an attacker may construct a JDBC query which may read files on the host filesystem. Due to the newer MySQL driver library in the latest...