[MAVEN:GHSA-F6FV-FJG8-4M6W] OpenRefine Directory Traversal

Severity Moderate

Affected Packages 1

Fixed Packages 1

CVEs 1

OpenRefine before 3.2 beta allows directory traversal via a relative pathname in a ZIP archive.

Package	Affected Version
pkg:maven/org.openrefine/main	< 3.2-beta

Package	Fixed Version
pkg:maven/org.openrefine/main	= 3.2-beta

ID: MAVEN:GHSA-F6FV-FJG8-4M6W
Severity: moderate
URL: https://github.com/advisories/GHSA-f6fv-fjg8-4m6w
Published: 2022-05-14T01:14:50
(2 years ago)
Modified: 2023-10-06T15:30:56
(11 months ago)
Rights: Maven Security Team

Source	# ID	Name	URL
			https://nvd.nist.gov/vuln/detail/CVE-2018-19859
			https://github.com/OpenRefine/OpenRefine/issues/1840
			https://github.com/OpenRefine/OpenRefine/pull/1901
			https://github.com/OpenRefine/OpenRefine/commit/e243e73e4064de87a913946bd320fbbe246da656
			https://github.com/advisories/GHSA-f6fv-fjg8-4m6w

Type	Package URL	Namespace	Name / Product	Version	Distribution / Platform	Arch	Patch / Fix
Affected	pkg:maven/org.openrefine/main	org.openrefine	main	< 3.2-beta
Fixed	pkg:maven/org.openrefine/main	org.openrefine	main	= 3.2-beta

# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	Exploits	PoC	Pubblication Date	Modification Date
# CVE	Description	CVSS	EPSS	EPSS Trend (30 days)	Affected Products	Weaknesses	Security Advisories	PoC	Pubblication Date	Modification Date