openrefine vulnerabilities (Ubuntu)
12 vulnerabilities.
-
openrefineUbuntu OpenRefine through 3.10.1 CSRF to RCE via get-rows Command 7.7 High -
openrefineUbuntu OpenRefine has a path traversal in LoadLanguageCommand 7.1 High -
openrefineUbuntu OpenRefine's error page lacks escaping, leading to potential Cross-site Scripting on import of malicious project 5.9 Medium -
openrefineUbuntu OpenRefine's SQLite integration allows filesystem access, remote code execution (RCE) 8.1 High -
openrefineUbuntu OpenRefine has a reflected cross-site scripting vulnerability from POST request in ExportRowsCommand 8.1 High -
openrefineUbuntu OpenRefine's PreviewExpressionCommand, which is eval, lacks protection against cross-site request forgery (CSRF) 7.6 High -
openrefineUbuntu Reflected cross-site scripting vulnerability (XSS) in GData extension (authorized.vt) 8.1 High -
openrefineUbuntu OpenRefine JDBC Attack Vulnerability 7.5 High -
openrefineUbuntu Remote Code exec in project import with mysql jdbc url attack 9.8 Critical -
openrefineUbuntu OpenRefine vulnerable to arbitrary file read in project import with mysql jdbc url attack 7.5 High -
openrefineUbuntu OpenRefine Server-Side Request Forgery vulnerability 6.5 Medium -
openrefineUbuntu Zip slip in OpenRefine 5.5 Medium