{"action":"Upgrade org.openrefine:database to 3.8.3 or later.","affected":[{"fixed":"3.8.3","introduced":"3.4-beta"}],"component":"org.openrefine:database","cve_ids":["CVE-2024-47881"],"ecosystem":"Maven","epss":0.00689,"exploited":false,"fixed_versions":["3.8.3"],"ghsa_id":"GHSA-87cf-j763-vvh8","id":"tcs_01M5N8M4X5SESBCBBRBVKPZYMB","modified_at":"2024-12-04T05:39:36.067915Z","published_at":"2024-10-24T18:11:20Z","references":["https://osv.dev/vulnerability/GHSA-87cf-j763-vvh8","https://github.com/OpenRefine/OpenRefine/security/advisories/GHSA-87cf-j763-vvh8","https://github.com/OpenRefine/OpenRefine/commit/853a1d91662e7dc278a9a94a38be58de04494056","https://github.com/OpenRefine/OpenRefine"],"severity":{"label":"high","score":8.1},"sources":[{"source":"osv","source_id":"GHSA-87cf-j763-vvh8","url":"https://osv.dev/vulnerability/GHSA-87cf-j763-vvh8"}],"summary":"OpenRefine's SQLite integration allows filesystem access, remote code execution (RCE)"}