openrefine vulnerabilities (Debian)
12 vulnerabilities.
-
openrefineDebian OpenRefine through 3.10.1 CSRF to RCE via get-rows Command 7.7 High -
openrefineDebian OpenRefine has a path traversal in LoadLanguageCommand 7.1 High -
openrefineDebian OpenRefine's error page lacks escaping, leading to potential Cross-site Scripting on import of malicious project 5.9 Medium -
openrefineDebian OpenRefine's SQLite integration allows filesystem access, remote code execution (RCE) 8.1 High -
openrefineDebian OpenRefine has a reflected cross-site scripting vulnerability from POST request in ExportRowsCommand 8.1 High -
openrefineDebian OpenRefine's PreviewExpressionCommand, which is eval, lacks protection against cross-site request forgery (CSRF) 7.6 High -
openrefineDebian Reflected cross-site scripting vulnerability (XSS) in GData extension (authorized.vt) 8.1 High -
openrefineDebian OpenRefine JDBC Attack Vulnerability 7.5 High -
openrefineDebian Remote Code exec in project import with mysql jdbc url attack 9.8 Critical -
openrefineDebian OpenRefine vulnerable to arbitrary file read in project import with mysql jdbc url attack 7.5 High -
openrefineDebian OpenRefine Server-Side Request Forgery vulnerability 6.5 Medium -
openrefineDebian Zip slip in OpenRefine 5.5 Medium