org.openrefine:main vulnerabilities (Maven)

4 vulnerabilities.

• org.openrefine:main Maven OpenRefine's PreviewExpressionCommand, which is eval, lacks protection against cross-site request forgery (CSRF) CVE-2024-47879 Fix available 7.6 HighOctober 24, 2024
• org.openrefine:main Maven OpenRefine Server-Side Request Forgery vulnerability CVE-2022-41401 Public exploitFix available 6.5 MediumAugust 4, 2023
• org.openrefine:main Maven Zip slip in OpenRefine CVE-2023-37476 Fix available 5.5 MediumJuly 17, 2023
• org.openrefine:main Maven OpenRefine Directory Traversal CVE-2018-19859 Public exploitFix available 6.5 MediumDecember 5, 2018