Junglewise Threat Intelligence

OpenRefine leaks Google API credentials in releases

Severity: info · Published 2024-10-24

Technologies: org.openrefine:openrefine (Maven). Vendors: Maven.

Executive brief

OpenRefine leaks Google API credentials in releases

Affected products

Maven org.openrefine:openrefine

Related threats

OpenRefine has a path traversal in LoadLanguageCommand
OpenRefine's error page lacks escaping, leading to potential Cross-site Scripting on import of malicious project
OpenRefine has a reflected cross-site scripting vulnerability (XSS) from POST request in ExportRowsCommand