Vulnerabilityhigh
OpenRefine's Zip Slip Vulnerability Could Let Attackers Execute Malicious Code
Vulnerabilities mentioned
All| CVE | Vulnerability | CVSS | EPSS | Signals | Published |
|---|---|---|---|---|---|
| CVE-2023-24955 | Authenticated Code Injection RCE in Microsoft SharePoint Server (Actively Exploited) | 7.2 | 85% | KEVRansomware | KEV |
| CVE-2023-29357 | Privilege Escalation via JWT Authentication Bypass in Microsoft SharePoint Server | 9.8 | 100% | KEVRansomware | KEV |
| CVE-2023-34468 | The DBCPConnectionPool and HikariCPConnectionPool Controller Services in Apache NiFi 0.0.2 through 1.21.0 allow an authenticated and authorized user to… | 8.8 | 62% | ||
| CVE-2023-37476 | OpenRefine: A carefully crafted malicious OpenRefine project tar file can be used to trigger arbitrary code execution in the context of the… | 7.8 | <1% |
From the original article
2 min read at thehackernews.com
Ravie Lakshmanan Oct 02, 2023 Vulnerability / Cyber Attack A high-severity security flaw has been disclosed in the open-source OpenRefine data cleanup and transformation tool that could result in arbitrary code execution on affected systems. Tracked as CVE-2023-37476 (CVSS score: 7.
By @TheHackersNews · thehackernews.com
A short excerpt; the article and its images belong to the publisher. Summary, key facts and assessment above are AI-written from the article and can be wrong.