Headline
GHSA-q7mc-fc87-v7w7: OpenRefine Server-Side Request Forgery vulnerability
OpenRefine <= v3.5.2 contains a Server-Side Request Forgery (SSRF) vulnerability, which permits unauthorized users to exploit the system, potentially leading to unauthorized access to internal resources and sensitive file disclosure.
OpenRefine Server-Side Request Forgery vulnerability
Moderate severity GitHub Reviewed Published Aug 4, 2023 to the GitHub Advisory Database • Updated Aug 4, 2023
Related news
CVE-2022-41401: OpenRefine/main/src/com/google/refine/importing/ImportingUtilities.java at cb55cdfdf6f9ca916839778dc847cce803688998 · OpenRefine/OpenRefine
OpenRefine <= v3.5.2 contains a Server-Side Request Forgery (SSRF) vulnerability, which permits unauthorized users to exploit the system, potentially leading to unauthorized access to internal resources and sensitive file disclosure.