Cross-Site Scripting (XSS)

org.openrefine, extensions is vulnerable to cross-site scripting XSS. The vulnerability is due to the /extension/gdata/authorized endpoint including the state GET parameter verbatim in a...

org.openrefine:benchmark (>=3.6-beta1, <=3.8.2), org.openrefine:database (>=3.6-beta1, <=3.8.2) +7 more potentially affected by CVE-2024-47883 via org.openrefine.dependencies:butterfly (>=1.2.3, <=1.2.5)

org.openrefine.dependencies:butterfly MAVEN version =1.2.3, =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.6-beta1, =3.7-beta1, =3.6-beta1, =3.6.2 Source cves: CVE-2024-47883 Source advisory: GHSA-3P8V-W8MR-M3X8...