231 matches found
CVE-2018-20157
The data import functionality in OpenRefine through 3.1 allows an XML External Entity XXE attack through a crafted zip file, allowing attackers to read arbitrary files...
CVE-2018-20157
OpenRefine data import functionality is affected by an XML External Entity (XXE) vulnerability in OpenRefine 3.1 and earlier. The issue arises from parsing a crafted (zip) file, enabling an attacker to read arbitrary files on the system. The provided connected sources confirm the affected compone...
CVE-2018-20157
The data import functionality in OpenRefine through 3.1 allows an XML External Entity XXE attack through a crafted zip file, allowing attackers to read arbitrary files...
CVE-2018-20157
The data import functionality in OpenRefine through 3.1 allows an XML External Entity XXE attack through a crafted zip file, allowing attackers to read arbitrary files...
OpenRefine Directory Traversal Vulnerability
OpenRefine is a standalone open source desktop application for data cleaning and converting data to other formats. A directory traversal vulnerability exists in OpenRefine prior to 3.5. An attacker can exploit this vulnerability to achieve directory traversal via the relative pathname of a ZIP...
CVE-2018-19859
OpenRefine before 3.2 beta allows directory traversal via a relative pathname in a ZIP archive...
CVE-2018-19859
OpenRefine before 3.2 beta allows directory traversal via a relative pathname in a ZIP archive...
Directory traversal
OpenRefine before 3.2 beta allows directory traversal via a relative pathname in a ZIP archive...
CVE-2018-19859
OpenRefine before 3.2 beta allows directory traversal via a relative pathname in a ZIP archive...
CVE-2018-19859
OpenRefine before 3.2 beta is vulnerable to directory traversal via a relative pathname in a ZIP archive (CVE-2018-19859). The issue is confirmed across multiple advisories linking to OpenRefine's project import path handling. Mitigation known in the connected docs includes patches suggested by P...