CVE-2022-41401
MEDIUM 6.5EPSS 1.4%
OpenRefine <= v3.5.2 contains a Server-Side Request Forgery (SSRF) vulnerability, which permits unauthorized users to exploit the system, potentially leading to unauthorized access to internal resources and sensitive file disclosure.
- CVSS v3.1 NVD
- 6.5 MEDIUM
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N - EPSS
- 1.38% chance of exploitation in the next 30 days, 72nd percentile
- Published
- 2023-08-04
- Updated
- 2024-10-17
Proof-of-concept exploits (1)
- ixSly/CVE-2022-414011★ · 2023-07-31
Security advisories
- OpenRefine/OpenRefine/blob/cb55cdfdf6f9ca916839778dc847cce803688998/main/src/com/google/r…
- advisories/GHSA-q7mc-fc87-v7w7