Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-41887

Remote Code exec in project import with mysql jdbc url attack

Description

OpenRefine is a powerful free, open source tool for working with messy data. Prior to version 3.7.5, a remote code execution vulnerability allows any unauthenticated user to execute code on the server. Version 3.7.5 has a patch for this issue.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

OpenRefine OpenRefine

  • <= 3.7.4affected

References