Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1000 CNY

100.0%
Buy Us a Coffee

OpenRefine — Vulnerabilities & Security Advisories 10

All 10 CVE vulnerabilities found in OpenRefine, with AI-generated Chinese analysis, references, and POCs.

Vendor: OpenRefine

CVE IDTitleCVSSSeverityPublished
CVE-2024-49760 OpenRefine has a path traversal in LoadLanguageCommand CWE-22 7.1 High2024-10-24
CVE-2024-47882 OpenRefine's error page lacks escaping, leading to potential Cross-site Scripting on import of malicious project CWE-79 5.9 Medium2024-10-24
CVE-2024-47881 OpenRefine's SQLite integration allows filesystem access, remote code execution (RCE) CWE-89 8.1 High2024-10-24
CVE-2024-47880 OpenRefine has a reflected cross-site scripting vulnerability from POST request in ExportRowsCommand CWE-79 8.1 High2024-10-24
CVE-2024-47879 OpenRefine's PreviewExpressionCommand, which is eval, lacks protection against cross-site request forgery (CSRF) CWE-352 7.6 High2024-10-24
CVE-2024-47878 Reflected cross-site scripting vulnerability (XSS) in GData extension (authorized.vt) CWE-79 8.1 High2024-10-24
CVE-2024-23833 OpenRefine JDBC Attack Vulnerability CWE-22 7.5 High2024-02-12
CVE-2023-41887 Remote Code exec in project import with mysql jdbc url attack CWE-89 9.8 Critical2023-09-15
CVE-2023-41886 OpenRefine vulnerable to arbitrary file read in project import with mysql jdbc url attack CWE-89 7.5 High2023-09-15
CVE-2023-37476 Zip slip in OpenRefine CWE-22 5.5 Medium2023-07-17

All 10 known CVE vulnerabilities affecting OpenRefine with full Chinese analysis, references, and POCs where available.