CVE-2018-19859: Path Traversal
Published Dec 5, 2018
·Updated
OpenRefine before 3.2 beta allows directory traversal via a relative pathname in a ZIP archive.
Affected Software
34 affected componentsFixes available
maven/org.openrefine:main<3.2-beta
3.2-beta
OpenRefine openrefine=1.0
OpenRefine openrefine=1.0-a1
OpenRefine openrefine=1.0-a2
OpenRefine openrefine=1.0-a3
OpenRefine openrefine=1.0-a4
OpenRefine openrefine=1.0-b1
OpenRefine openrefine=1.0.1
OpenRefine openrefine=1.0.2
OpenRefine openrefine=1.0.3
OpenRefine openrefine=1.0.5
OpenRefine openrefine=1.0.6
OpenRefine openrefine=1.0.7
OpenRefine openrefine=1.1
OpenRefine openrefine=2.0
OpenRefine openrefine=2.1
OpenRefine openrefine=2.1-rc1
OpenRefine openrefine=2.5
OpenRefine openrefine=2.5-rc1
OpenRefine openrefine=2.5-rc3
OpenRefine openrefine=2.6-alpha1
OpenRefine openrefine=2.6-alpha2
OpenRefine openrefine=2.6-beta1
OpenRefine openrefine=2.6-rc1
OpenRefine openrefine=2.6-rc2
OpenRefine openrefine=2.7
OpenRefine openrefine=2.7-rc1
OpenRefine openrefine=2.7-rc2
OpenRefine openrefine=2.8
OpenRefine openrefine=3.0
OpenRefine openrefine=3.0-beta
OpenRefine openrefine=3.0-rc1
OpenRefine openrefine=3.1
OpenRefine openrefine=3.1-beta
Event History
Dec 5, 2018
CVE Published
via MITRE·11:00 AM
Data Sourced
via MITRE·11:00 AM
Description
May 14, 2022
Advisory Published
01:14 AM
Frequently Asked Questions
1
What is CVE-2018-19859?
CVE-2018-19859 is a vulnerability in OpenRefine before version 3.2 beta that allows directory traversal via a relative pathname in a ZIP archive.
2
How severe is CVE-2018-19859?
CVE-2018-19859 has a severity score of 6.5, which is considered medium.
3
How can I fix CVE-2018-19859?
To fix CVE-2018-19859, upgrade to OpenRefine version 3.2 beta or later.
4
Where can I find more information about CVE-2018-19859?
You can find more information about CVE-2018-19859 on the NIST National Vulnerability Database (NVD) website.
5
What CWE category does CVE-2018-19859 belong to?
CVE-2018-19859 belongs to CWE category 22.