Junglewise Threat Intelligence

CVE-2024-49760: OpenRefine has a path traversal in LoadLanguageCommand

CVE-2024-49760 · Severity: low · CVSS 3.1 · Published 2024-10-24

Technologies: org.openrefine:openrefine (Maven). Vendors: Maven.

Executive brief

OpenRefine has a path traversal in LoadLanguageCommand

Affected products

Maven org.openrefine:openrefine

Related threats

OpenRefine leaks Google API credentials in releases
OpenRefine's error page lacks escaping, leading to potential Cross-site Scripting on import of malicious project
OpenRefine has a reflected cross-site scripting vulnerability (XSS) from POST request in ExportRowsCommand