org.openrefine:main (Maven) — known CVEs & security advisories

Known CVE vulnerabilities and GitHub Security Advisories affecting the Maven package org.openrefine:main, with affected version ranges, CVSS severity, EPSS exploit prediction, and CISA KEV status.

CVEs (4)

• CVE-2024-47879 — CVSS 7.6 (high): OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, lack of cross-site request forgery protection…
• CVE-2018-19859 — CVSS 6.5 (medium): OpenRefine before 3.2 beta allows directory traversal via a relative pathname in a ZIP archive.
• CVE-2022-41401 — CVSS 6.5 (medium): OpenRefine <= v3.5.2 contains a Server-Side Request Forgery (SSRF) vulnerability, which permits unauthorized users to exploit the system…
• CVE-2023-37476 — CVSS 5.5 (medium): OpenRefine is a free, open source tool for data processing. A carefully crafted malicious OpenRefine project tar file can be used to…