Skip to main content
cve.nowby Sazabi
← Maven
MavenPackage

org.openrefine:database

4 known vulnerabilities (1 critical, 3 high), with the versions each affects and the releases that fix them.

Latest release
Not known: cve.now hasn't read this package's releases
Newest unaffected release
Not known without release data
Advisories
4 · 1 critical, 3 high
Registry
Maven Central

Advisories 4

  • OpenRefine's SQLite integration allows filesystem access, remote code execution (RCE)

    Affected: from 3.4-beta, fixed in 3.8.3.

  • OpenRefine JDBC Attack Vulnerability

    Affected: fixed in 3.7.8.

  • CVE-2023-41887Critical 9.8

    Remote Code exec in project import with mysql jdbc url attack

    Affected: fixed in 3.7.5.

  • OpenRefine vulnerable to arbitrary file read in project import with mysql jdbc url attack

    Affected: fixed in 3.7.5.