25Eki
CVE-2024-49760 | OpenRefine up to 3.8.2 translations-$LANG.json LANG path traversal (GHSA-qfwq-6jh6-8xx4)
A vulnerability was found in OpenRefine up to 3.8.2. It has been declared as critical. This vulnerability affects unknown code of the file translations-$LANG.json. The manipulation of the argument LANG leads to path traversal. This vulnerability was named CVE-2024-49760. The attack can be initiated remotely. There is no exploit available. It is recommended to upgrade the affected component.