CVE-2023-41887
Remote Code exec in project import with mysql jdbc url attack
Résumé
Remote Code exec in project import with mysql jdbc url attack
Description d'origine
La description telle que publiée par la source (souvent en anglais).
OpenRefine is a powerful free, open source tool for working with messy data. Prior to version 3.7.5, a remote code execution vulnerability allows any unauthenticated user to execute code on the server. Version 3.7.5 has a patch for this issue.
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
État des correctifs par distribution
Paquets corrigés publiés par chaque distribution pour cette CVE
- Debian DEBIAN-CVE-2023-41887 openrefine Corrigé dans: 3.6.2-2+deb12u2
Références
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- patch github.com