Количество 5
Количество 5
CVE-2024-47881
OpenRefine is a free, open source tool for working with messy data. Starting in version 3.4-beta and prior to version 3.8.3, in the `database` extension, the "enable_load_extension" property can be set for the SQLite integration, enabling an attacker to load (local or remote) extension DLLs and so run arbitrary code on the server. The attacker needs to have network access to the OpenRefine instance. Version 3.8.3 fixes this issue.
CVE-2024-47881
OpenRefine is a free, open source tool for working with messy data. Starting in version 3.4-beta and prior to version 3.8.3, in the `database` extension, the "enable_load_extension" property can be set for the SQLite integration, enabling an attacker to load (local or remote) extension DLLs and so run arbitrary code on the server. The attacker needs to have network access to the OpenRefine instance. Version 3.8.3 fixes this issue.
CVE-2024-47881
OpenRefine is a free, open source tool for working with messy data. St ...
GHSA-87cf-j763-vvh8
OpenRefine's SQLite integration allows filesystem access, remote code execution (RCE)
BDU:2024-10250
Уязвимость расширения database программного средства извлечения и очистки табличных данных OpenRefine, позволяющая нарушителю выполнить произвольный код
Уязвимостей на страницу
Уязвимость | CVSS | EPSS | Опубликовано | |
|---|---|---|---|---|
 | CVE-2024-47881 OpenRefine is a free, open source tool for working with messy data. Starting in version 3.4-beta and prior to version 3.8.3, in the `database` extension, the "enable_load_extension" property can be set for the SQLite integration, enabling an attacker to load (local or remote) extension DLLs and so run arbitrary code on the server. The attacker needs to have network access to the OpenRefine instance. Version 3.8.3 fixes this issue. | CVSS3: 8.1 | 1% Низкий | почти 2 года назад |
 | CVE-2024-47881 OpenRefine is a free, open source tool for working with messy data. Starting in version 3.4-beta and prior to version 3.8.3, in the `database` extension, the "enable_load_extension" property can be set for the SQLite integration, enabling an attacker to load (local or remote) extension DLLs and so run arbitrary code on the server. The attacker needs to have network access to the OpenRefine instance. Version 3.8.3 fixes this issue. | CVSS3: 8.1 | 1% Низкий | почти 2 года назад |
| CVE-2024-47881 OpenRefine is a free, open source tool for working with messy data. St ... | CVSS3: 8.1 | 1% Низкий | почти 2 года назад |
| GHSA-87cf-j763-vvh8 OpenRefine's SQLite integration allows filesystem access, remote code execution (RCE) | CVSS3: 8.1 | 1% Низкий | почти 2 года назад |
 | BDU:2024-10250 Уязвимость расширения database программного средства извлечения и очистки табличных данных OpenRefine, позволяющая нарушителю выполнить произвольный код | CVSS3: 8.8 | 1% Низкий | почти 2 года назад |
Уязвимостей на страницу