https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 11:39:33 +0000 https://cve.radiocsirt.org/vuln/cve-2024-47882 <p><strong>Affected:</strong> OpenRefine</p> <p>OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the built-in &#34;Something went wrong!&#34; error page includes the exception message and exception traceback without escaping HTML tags, enabling injection into the page if an attacker can reliably produce an error with an attacker-influenced message. It appears that the only way to reach this code in OpenRefine itself is for an attacker to somehow convince a victim to import a malicious file, which may be difficult. However, out-of-tree extensions may add their own calls to `respondWithErrorPage`. Version 3.8.3 has a fix for this issue.</p> <p><strong>Affected:</strong> OpenRefine</p> <p>OpenRefine is a free, open source tool for working with messy data. Prior to version 3.8.3, the built-in &#34;Something went wrong!&#34; error page includes the exception message and exception traceback without escaping HTML tags, enabling injection into the page if an attacker can reliably produce an error with an attacker-influenced message. It appears that the only way to reach this code in OpenRefine itself is for an attacker to somehow convince a victim to import a malicious file, which may be difficult. However, out-of-tree extensions may add their own calls to `respondWithErrorPage`. Version 3.8.3 has a fix for this issue.</p> https://cve.radiocsirt.org/vuln/cve-2024-47882