GitHub Advisoryadvisory · Maven

GHSA-q7mc-fc87-v7w7 OpenRefine Server-Side Request Forgery vulnerability

MEDIUM Published 2023-08-04 Modified 2023-08-08 Official page ↗
Aliases
CVE-2022-41401
Ecosystem
Maven
Packages
org.openrefine:main
Severity
Moderate
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Weaknesses
CWE-918
Reviewed
2023-08-04

Affected packages

• Maven org.openrefine:main: < 3.6.0 → fixed in 3.6.0

Description

OpenRefine <= v3.5.2 contains a Server-Side Request Forgery (SSRF) vulnerability, which permits unauthorized users to exploit the system, potentially leading to unauthorized access to internal resources and sensitive file disclosure.

Related

Alias · CVE (1)

  • CVE-2022-41401 OpenRefine <= v3.5.2 contains a Server-Side Request Forgery (SSRF) vulnerability, which permits unauthorized users to exploit the system,… vulnerability

Weakness · CWE (1)

  • CWE-918 Server-Side Request Forgery weakness

References