Junglewise Threat Intelligence

CVE-2024-47879: OpenRefine's PreviewExpressionCommand, which is eval, lacks protection against cross-site request forgery (CSRF)

CVE-2024-47879 · Severity: low · CVSS 3.1 · Published 2024-10-24

Technologies: org.openrefine:main (Maven). Vendors: Maven.

Executive brief

OpenRefine's PreviewExpressionCommand, which is eval, lacks protection against cross-site request forgery (CSRF)

Affected products

  • Maven org.openrefine:main

Related threats