PT-2023-5893 · Unknown +2 · Openrefine +2

Name of the Vulnerable Software and Affected Versions: OpenRefine versions prior to 3.7.4 Description: The issue is related to a Zip Slip vulnerability in OpenRefine, which can be exploited by a specially crafted malicious OpenRefine project tar file. This can lead to arbitrary code execution in...

GHSA-F6FV-FJG8-4M6W OpenRefine Directory Traversal

OpenRefine before 3.2 beta allows directory traversal via a relative pathname in a ZIP archive...

OpenRefine Directory Traversal

OpenRefine before 3.2 beta allows directory traversal via a relative pathname in a ZIP archive...

CVE-2019-3580

OpenRefine through 3.1 allows arbitrary file write because Directory Traversal can occur during the import of a crafted project file...

Directory traversal

OpenRefine through 3.1 allows arbitrary file write because Directory Traversal can occur during the import of a crafted project file...

CVE-2019-3580

OpenRefine through 3.1 allows arbitrary file write because Directory Traversal can occur during the import of a crafted project file...

CVE-2019-3580

OpenRefine (up to version 3.1) is affected by CVE-2019-3580: during import of a crafted project file, a directory traversal flaw allows arbitrary file write. The description consistently states this vulnerability exists in OpenRefine 3.1 and earlier, caused by directory traversal in the import pr...

CVE-2019-3580

OpenRefine through 3.1 allows arbitrary file write because Directory Traversal can occur during the import of a crafted project file...

CVE-2019-3580: Improper Limitation of a Pathname to a Restricted Directory

OpenRefine through 3.1 allows arbitrary file write because Directory Traversal can occur during the import of a crafted project file...

OpenRefine Arbitrary File Write Vulnerability

OpenRefine is a Java-based open source tool that is used to load data, analyze it, clean it, and more. A directory traversal vulnerability exists in OpenRefine 3.1 and earlier versions. An attacker can exploit this vulnerability by importing a specially crafted project file to write arbitrary fil...

OpenRefine XML External Entity Injection Vulnerability

OpenRefine is a standalone open source desktop application for data cleaning and converting data to other formats. An XML External Entity Injection XXE vulnerability exists in the data import function in OpenRefine versions 3.1 and earlier. The vulnerability can be exploited to read arbitrary fil...

CVE-2018-20157

The data import functionality in OpenRefine through 3.1 allows an XML External Entity XXE attack through a crafted zip file, allowing attackers to read arbitrary files...

CVE-2018-20157

The data import functionality in OpenRefine through 3.1 allows an XML External Entity XXE attack through a crafted zip file, allowing attackers to read arbitrary files...

Xxe

The data import functionality in OpenRefine through 3.1 allows an XML External Entity XXE attack through a crafted zip file, allowing attackers to read arbitrary files...

CVE-2018-20157

OpenRefine data import functionality is affected by an XML External Entity (XXE) vulnerability in OpenRefine 3.1 and earlier. The issue arises from parsing a crafted (zip) file, enabling an attacker to read arbitrary files on the system. The provided connected sources confirm the affected compone...

CVE-2018-20157

The data import functionality in OpenRefine through 3.1 allows an XML External Entity XXE attack through a crafted zip file, allowing attackers to read arbitrary files...

CVE-2018-20157

The data import functionality in OpenRefine through 3.1 allows an XML External Entity XXE attack through a crafted zip file, allowing attackers to read arbitrary files...

CVE-2018-20157: Improper Restriction of XML External Entity Reference

The data import functionality in OpenRefine through 3.1 allows an XML External Entity XXE attack through a crafted zip file, allowing attackers to read arbitrary files...

PT-2018-15278

Name of the Vulnerable Software and Affected Versions OpenRefine versions prior to 3.2 Description The issue concerns the data import functionality, which is susceptible to an XML External Entity XXE attack. This attack can be initiated through a crafted zip file, enabling attackers to read...

OpenRefine Directory Traversal Vulnerability

OpenRefine is a standalone open source desktop application for data cleaning and converting data to other formats. A directory traversal vulnerability exists in OpenRefine prior to 3.5. An attacker can exploit this vulnerability to achieve directory traversal via the relative pathname of a ZIP...