Skip to content
Threat Feed
Subscribe

Product

OpenRefine (<= 3.10.1)

1 brief RSS
high advisory

CSRF Vulnerability in OpenRefine Leading to Remote Code Execution

OpenRefine versions up to 3.10.1 are vulnerable to a cross-site request forgery attack in the get-rows command that permits remote attackers to execute arbitrary Jython facet expressions and achieve system command execution.

OpenRefine web-vulnerability csrf rce
2t 1c