CVE-2023-41887
Remote Code exec in project import with mysql jdbc url attack
Summary
Remote Code exec in project import with mysql jdbc url attack
Original description
The description as published by the source.
OpenRefine is a powerful free, open source tool for working with messy data. Prior to version 3.7.5, a remote code execution vulnerability allows any unauthenticated user to execute code on the server. Version 3.7.5 has a patch for this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Debian DEBIAN-CVE-2023-41887 openrefine Fixed in: 3.6.2-2+deb12u2
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com