Skip to content
CVE PROGRAM SOURCE RECORD7.5 High

CVE-2023-41886

OpenRefine vulnerable to arbitrary file read in project import with mysql jdbc url attack

Description

OpenRefine is a powerful free, open source tool for working with messy data. Prior to version 3.7.5, an arbitrary file read vulnerability allows any unauthenticated user to read a file on a server. Version 3.7.5 fixes this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenRefine OpenRefine

  • <= 3.7.4affected

References