CVE-2023-41886
OpenRefine vulnerable to arbitrary file read in project import with mysql jdbc url attack
Résumé
OpenRefine vulnerable to arbitrary file read in project import with mysql jdbc url attack
Description d'origine
La description telle que publiée par la source (souvent en anglais).
OpenRefine is a powerful free, open source tool for working with messy data. Prior to version 3.7.5, an arbitrary file read vulnerability allows any unauthenticated user to read a file on a server. Version 3.7.5 fixes this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2023-41886 openrefine Corrigé dans: 3.6.2-2+deb12u2
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com