Executive brief
OpenRefine's error page lacks escaping, leading to potential Cross-site Scripting on import of malicious project
Affected products
- Maven org.openrefine:openrefine
Junglewise Threat Intelligence
CVE-2024-47882: OpenRefine's error page lacks escaping, leading to potential Cross-site Scripting on import of malicious project
CVE-2024-47882 · Severity: low · CVSS 3.1 · Published 2024-10-24
Technologies: org.openrefine:openrefine (Maven). Vendors: Maven.