CVE-2018-19859

Description

OpenRefine before 3.2 beta allows directory traversal via a relative pathname in a ZIP archive.

Affected packages (1)

• Maven/org.openrefine:mainfrom 0, < 3.2-beta

CVSS scores

References (5)

• ADVISORYhttps://nvd.nist.gov/vuln/detail/CVE-2018-19859
• PATCHhttps://github.com/OpenRefine/OpenRefine
• WEBhttps://github.com/OpenRefine/OpenRefine/commit/e243e73e4064de87a913946bd320fbbe246da656
• WEBhttps://github.com/OpenRefine/OpenRefine/issues/1840
• WEBhttps://github.com/OpenRefine/OpenRefine/pull/1901