12 matches found
CVE-2022-22733
CVE-2022-22733 CVE-2022-22733 は、Apache ShardingSphere ElasticJob-UI 3.0.0 以前のバージョンに影響を与える脆弱性であり、権限昇格 Privilege Escalation を引き起こします。しかし、昇格した権限を悪用することで JDBC 攻撃を実行し、RCE を達成することが可能です。脆弱性の分析はこちらから、エクスプロイト作成のステップバイステップのブログはこちらから読むことができます。 エクスプロイトは以下のように動作します: 低権限のアカウントでログインします。 安全でない方法で生成された accessToke...
Linux Distros Unpatched Vulnerability : CVE-2024-23833
The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - OpenRefine is a free, open source power tool for working with messy data and improving it. A jdbc attack vulnerability exists in OpenRefineversion=3.7.7 where a...
CVE-2024-23833
OpenRefine is a free, open source power tool for working with messy data and improving it. A jdbc attack vulnerability exists in OpenRefineversion=3.7.7 where an attacker may construct a JDBC query which may read files on the host filesystem. Due to the newer MySQL driver library in the latest...
CVE-2024-23833
OpenRefine is a free, open source power tool for working with messy data and improving it. A jdbc attack vulnerability exists in OpenRefineversion=3.7.7 where an attacker may construct a JDBC query which may read files on the host filesystem. Due to the newer MySQL driver library in the latest...
CVE-2024-23833
OpenRefine is a free, open source power tool for working with messy data and improving it. A jdbc attack vulnerability exists in OpenRefineversion=3.7.7 where an attacker may construct a JDBC query which may read files on the host filesystem. Due to the newer MySQL driver library in the latest...
Design/Logic Flaw
OpenRefine is a free, open source power tool for working with messy data and improving it. A jdbc attack vulnerability exists in OpenRefineversion=3.7.7 where an attacker may construct a JDBC query which may read files on the host filesystem. Due to the newer MySQL driver library in the latest...
CVE-2024-23833 OpenRefine JDBC Attack Vulnerability
OpenRefine is a free, open source power tool for working with messy data and improving it. A jdbc attack vulnerability exists in OpenRefineversion=3.7.7 where an attacker may construct a JDBC query which may read files on the host filesystem. Due to the newer MySQL driver library in the latest...
CVE-2024-23833
CVE-2024-23833 affects OpenRefine up to version 3.7.7, where a JDBC query could be constructed to read files from the host filesystem. The issue arises from deserialization-related behavior with the MySQL driver, and although the newer driver (in OpenRefine 8.0.30) eliminates the deserialization ...
CVE-2024-23833 OpenRefine JDBC Attack Vulnerability
OpenRefine is a free, open source power tool for working with messy data and improving it. A jdbc attack vulnerability exists in OpenRefineversion=3.7.7 where an attacker may construct a JDBC query which may read files on the host filesystem. Due to the newer MySQL driver library in the latest...
OpenRefine JDBC Attack Vulnerability
Summary A jdbc attack vulnerability exists in OpenRefineversion=3.7.7 Details Vulnerability Recurrence Start by constructing a malicious MySQL Server using the open source project MySQLFakeServer here. Then go to the Jdbc connection trigger vulnerability Vulnerability Analysis This vulnerability ...
PT-2024-20112 · Unknown +3 · Openrefine +3
Name of the Vulnerable Software and Affected Versions: OpenRefine versions = 3.7.7 Description: A jdbc attack vulnerability exists in OpenRefine where an attacker may construct a JDBC query to read files on the host filesystem. This issue allows attackers to read sensitive files on the target...
