OOpenRefine

Products

Exploited and recent CVEs

• CVE-2026-108553 High 7.5 OpenRefine through 3.10.1 CSRF to RCE via get-rows Command 0.2%
• CVE-2024-49760 High 7.1 OpenRefine has a path traversal in LoadLanguageCommand 0.6%
• CVE-2024-47883 Critical 9.1 Butterfly has path/URL confusion in resource handling leading to multiple weaknesses 1.6%
• CVE-2024-47882 Medium 5.9 OpenRefine's error page lacks escaping, leading to potential Cross-site Scripting on import of malicious project 0.5%
• CVE-2024-47881 High 8.1 OpenRefine's SQLite integration allows filesystem access, remote code execution (RCE) 0.7%
• CVE-2024-47880 High 8.1 OpenRefine has a reflected cross-site scripting vulnerability from POST request in ExportRowsCommand 0.4%
• CVE-2024-47879 High 7.6 OpenRefine's PreviewExpressionCommand, which is eval, lacks protection against cross-site request forgery (CSRF) 0.4%
• CVE-2024-47878 High 8.1 Reflected cross-site scripting vulnerability (XSS) in GData extension (authorized.vt) 0.5%
• CVE-2024-23833 High 7.5 OpenRefine JDBC Attack Vulnerability 1.0%
• CVE-2023-41887 Critical 9.8 Remote Code exec in project import with mysql jdbc url attack 42.5%
• CVE-2023-41886 High 7.5 OpenRefine vulnerable to arbitrary file read in project import with mysql jdbc url attack 1.0%
• CVE-2023-37476 Medium 5.5 Zip slip in OpenRefine 0.6%