CVEDB API

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-20157

The data import functionality in OpenRefine through 3.1 allows an XML External Entity (XXE) attack through a crafted (zip) file, allowing attackers to read arbitrary files.

Exploit prediction scoring system (EPSS) score

EPSS Score 0.006

EPSS Ranking 67.0%

CVSS Severity

CVSS v3 Score 7.5

CVSS v2 Score 5.0

References

Products affected by CVE-2018-20157

Openrefine » Openrefine » Version: N/A

cpe:2.3:a:openrefine:openrefine:-
Openrefine » Openrefine » Version: 1.0

cpe:2.3:a:openrefine:openrefine:1.0
Openrefine » Openrefine » Version: 1.0.1

cpe:2.3:a:openrefine:openrefine:1.0.1
Openrefine » Openrefine » Version: 1.0.2

cpe:2.3:a:openrefine:openrefine:1.0.2
Openrefine » Openrefine » Version: 1.0.3

cpe:2.3:a:openrefine:openrefine:1.0.3
Openrefine » Openrefine » Version: 1.0.5

cpe:2.3:a:openrefine:openrefine:1.0.5
Openrefine » Openrefine » Version: 1.0.6

cpe:2.3:a:openrefine:openrefine:1.0.6
Openrefine » Openrefine » Version: 1.0.7

cpe:2.3:a:openrefine:openrefine:1.0.7
Openrefine » Openrefine » Version: 1.1

cpe:2.3:a:openrefine:openrefine:1.1
Openrefine » Openrefine » Version: 2.0

cpe:2.3:a:openrefine:openrefine:2.0
Openrefine » Openrefine » Version: 2.1

cpe:2.3:a:openrefine:openrefine:2.1
Openrefine » Openrefine » Version: 2.5

cpe:2.3:a:openrefine:openrefine:2.5
Openrefine » Openrefine » Version: 2.6

cpe:2.3:a:openrefine:openrefine:2.6
Openrefine » Openrefine » Version: 2.7

cpe:2.3:a:openrefine:openrefine:2.7
Openrefine » Openrefine » Version: 2.8

cpe:2.3:a:openrefine:openrefine:2.8
Openrefine » Openrefine » Version: 3.0

cpe:2.3:a:openrefine:openrefine:3.0
Openrefine » Openrefine » Version: 3.1

cpe:2.3:a:openrefine:openrefine:3.1

Vulnerabilities

Vulnerable Software

Vulnerability Details CVE-2018-20157

Products

Pricing

Contact Us