VYPR
← All advisories
High severity7.5OSV Advisory· Published Dec 15, 2018· Updated Jun 17, 2026

CVE-2018-20157

CVE-2018-20157

Description

The data import functionality in OpenRefine through 3.1 allows an XML External Entity (XXE) attack through a crafted (zip) file, allowing attackers to read arbitrary files.

AI Insight

LLM-synthesized narrative grounded in this CVE's description and references.

Affected products

2
  • Openrefine/OpenrefineOSV2 versions
    2.6-beta.1, 2.6-rc.2, 2.7, …+ 1 more
    • (no CPE)range: 2.6-beta.1, 2.6-rc.2, 2.7, …
    • (no CPE)range: <=3.1

Patches

Vulnerability mechanics

References

1

News mentions

0

No linked articles in our index yet.