CVE-2023-41886
OpenRefine vulnerable to arbitrary file read in project import with mysql jdbc url attack
Summary
OpenRefine vulnerable to arbitrary file read in project import with mysql jdbc url attack
Original description
The description as published by the source.
OpenRefine is a powerful free, open source tool for working with messy data. Prior to version 3.7.5, an arbitrary file read vulnerability allows any unauthenticated user to read a file on a server. Version 3.7.5 fixes this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-41886 openrefine Fixed in: 3.6.2-2+deb12u2
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com