Openrefine vulnerabilities

Products

• Openrefine 15

Newest

• openrefine OpenRefine through 3.10.1 CSRF to RCE via get-rows Command CVE-2026-108553 7.7 HighOctober 10, 2026
• openrefine OpenRefine has a path traversal in LoadLanguageCommand CVE-2024-49760 Fix available 7.1 HighOctober 24, 2024
• openrefine butterfly, simile-butterfly, similie butterfly +2 more Butterfly has path/URL confusion in resource handling leading to multiple weaknesses CVE-2024-47883 Fix available 9.1 CriticalOctober 24, 2024
• openrefine OpenRefine's error page lacks escaping, leading to potential Cross-site Scripting on import of malicious project CVE-2024-47882 Fix available 5.9 MediumOctober 24, 2024
• openrefine OpenRefine's SQLite integration allows filesystem access, remote code execution (RCE) CVE-2024-47881 Fix available 8.1 HighOctober 24, 2024
• openrefine OpenRefine has a reflected cross-site scripting vulnerability from POST request in ExportRowsCommand CVE-2024-47880 Fix available 8.1 HighOctober 24, 2024
• openrefine OpenRefine's PreviewExpressionCommand, which is eval, lacks protection against cross-site request forgery (CSRF) CVE-2024-47879 Fix available 7.6 HighOctober 24, 2024
• openrefine Reflected cross-site scripting vulnerability (XSS) in GData extension (authorized.vt) CVE-2024-47878 Fix available 8.1 HighOctober 24, 2024
• openrefine OpenRefine JDBC Attack Vulnerability CVE-2024-23833 Fix available 7.5 HighFebruary 12, 2024
• openrefine Remote Code exec in project import with mysql jdbc url attack CVE-2023-41887 Fix available EPSS 42.5% 9.8 CriticalSeptember 12, 2023
• openrefine OpenRefine vulnerable to arbitrary file read in project import with mysql jdbc url attack CVE-2023-41886 Fix available 7.5 HighSeptember 12, 2023
• openrefine OpenRefine Server-Side Request Forgery vulnerability CVE-2022-41401 Public exploitFix available 6.5 MediumAugust 4, 2023
• openrefine Zip slip in OpenRefine CVE-2023-37476 Fix available 5.5 MediumJuly 17, 2023
• openrefine OpenRefine through 3.1 allows arbitrary file write because Directory Traversal can occur during... CVE-2019-3580 7.5 HighJanuary 3, 2019
• openrefine The data import functionality in OpenRefine through 3.1 allows an XML External Entity (XXE)... CVE-2018-20157 7.5 HighDecember 14, 2018
• openrefine OpenRefine Directory Traversal CVE-2018-19859 Public exploitFix available 6.5 MediumDecember 5, 2018