Search Results (3 CVEs found)

CVE Vendors Products Updated CVSS v3.1
CVE-2019-3580 1 Openrefine 1 Openrefine 2024-11-21 N/A
OpenRefine through 3.1 allows arbitrary file write because Directory Traversal can occur during the import of a crafted project file.
CVE-2018-20157 1 Openrefine 1 Openrefine 2024-11-21 N/A
The data import functionality in OpenRefine through 3.1 allows an XML External Entity (XXE) attack through a crafted (zip) file, allowing attackers to read arbitrary files.
CVE-2018-19859 1 Openrefine 1 Openrefine 2024-11-21 N/A
OpenRefine before 3.2 beta allows directory traversal via a relative pathname in a ZIP archive.