{"action":"Upgrade org.openrefine:main to 3.6.0 or later.","affected":[{"fixed":"3.6.0","introduced":"0"}],"component":"org.openrefine:main","cve_ids":["CVE-2022-41401"],"ecosystem":"Maven","epss":0.01384,"exploited":false,"fixed_versions":["3.6.0"],"ghsa_id":"GHSA-q7mc-fc87-v7w7","id":"tcs_01M5N99058X7C9SQ2G11RT0YTR","modified_at":"2024-02-16T08:13:33.069738Z","published_at":"2023-08-04T18:30:39Z","references":["https://osv.dev/vulnerability/GHSA-q7mc-fc87-v7w7","https://nvd.nist.gov/vuln/detail/CVE-2022-41401","https://github.com/OpenRefine/OpenRefine/commit/8cb2fec45dd90fda8ed9608c691f6bb8ed721cd2","https://github.com/OpenRefine/OpenRefine","https://github.com/OpenRefine/OpenRefine/blob/30d6edb7b6586623bda09456c797c35983fb80ff/main/tests/server/src/com/google/refine/importing/ImportingUtilitiesTests.java#L180","https://github.com/OpenRefine/OpenRefine/blob/cb55cdfdf6f9ca916839778dc847cce803688998/main/src/com/google/refine/importing/ImportingUtilities.java#L103","https://github.com/ixSly/CVE-2022-41401"],"severity":{"label":"medium","score":6.5},"sources":[{"source":"osv","source_id":"GHSA-q7mc-fc87-v7w7","url":"https://osv.dev/vulnerability/GHSA-q7mc-fc87-v7w7"}],"summary":"OpenRefine Server-Side Request Forgery vulnerability"}