CVE-2018-20157

The data import functionality in OpenRefine through 3.1 allows an XML External Entity (XXE) attack through a crafted (zip) file, allowing attackers to read…

published December 14, 2018

CVSS
—
EPSS
2%
Percentile
77.4
In the wild
Unconfirmed
What it is

The data import functionality in OpenRefine through 3.1 allows an XML External Entity (XXE) attack through a crafted (zip) file, allowing attackers to read arbitrary files.

The record
Technical detail
CVSS
Not scored
CVSS v4.0
Not supplied
EPSS
0.01738 · 77.4th percentile
Published
2018-12-14T23:00Z
EPSS history
Timeline
  • 14 DEC 23:00Z
    The data import functionality in OpenRefine through 3.1 allows an XML External Entity (XXE) attack through a crafted (zip) file, allowing attackers to read…
    cvelistv5