~ / search / GHSA-f6fv-fjg8-4m6w

GHSA-f6fv-fjg8-4m6w

OpenRefine Directory Traversal

Source: GitHub Advisory Database (reviewed) Moderate CVE-2018-19859

Packages

EcosystemPackageAffectedFixed in
Maven org.openrefine:main < 3.2-beta 3.2-beta

Details

As written in the advisory (Markdown source, shown as plain text).

OpenRefine before 3.2 beta allows directory traversal via a relative pathname in a ZIP archive.

References

External links from the advisory. They lead to third-party sites.