USN-7260-1 openrefine vulnerabilities

It was discovered that OpenRefine did not properly handle opening tar files. If a user or application were tricked into opening a crafted tar file, an attacker could possibly use this issue to execute arbitrary code. This issue only affected Ubuntu 22.04 LTS. CVE-2023-37476 It was discovered that...

CVE-2024-47879

OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, lack of cross-site request forgery protection on the preview-expression command means that visiting a malicious website could cause an attacker-controlled expression to be executed. The expression can...

org.openrefine:benchmark (>=3.6-beta1, <=3.8.2), org.openrefine:database (>=3.6-beta1, <=3.8.2) +6 more potentially affected by CVE-2024-47879 via org.openrefine:main (>=3.6-beta1, <=3.8.2)

org.openrefine:main MAVEN version =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.7-beta1, =3.6-beta1, =3.6.2 Source cves: CVE-2024-47879 Source advisory: GHSA-3JM4-C6QF-JRH3...