OpenRefine through 3.1 allows arbitrary file write because Directory Traversal can occur during the import of a crafted project file.

出典: OSV.dev (Open Source Vulnerabilities) NVD OSV