Unrated severityOSV Advisory· Published Dec 14, 2018· Updated Aug 5, 2024
CVE-2018-20157
CVE-2018-20157
Description
The data import functionality in OpenRefine through 3.1 allows an XML External Entity (XXE) attack through a crafted (zip) file, allowing attackers to read arbitrary files.
Affected products
1- Range: 2.6-beta.1, 2.6-rc.2, 2.7, …
Patches
0No patches discovered yet.
Vulnerability mechanics
AI mechanics synthesis has not run for this CVE yet.
References
1- github.com/OpenRefine/OpenRefine/issues/1907mitrex_refsource_MISC
News mentions
0No linked articles in our index yet.