{"action":"Upgrade org.openrefine:openrefine to 3.8.3 or later.","affected":[{"fixed":"3.8.3","introduced":"0"}],"component":"org.openrefine:openrefine","cve_ids":["CVE-2024-49760"],"ecosystem":"Maven","epss":0.0059,"exploited":false,"fixed_versions":["3.8.3"],"ghsa_id":"GHSA-qfwq-6jh6-8xx4","id":"tcs_01M5N99EQX4WZPXWWRKD41BRMZ","modified_at":"2024-11-06T16:02:38.055827Z","published_at":"2024-10-24T18:32:40Z","references":["https://osv.dev/vulnerability/GHSA-qfwq-6jh6-8xx4","https://github.com/OpenRefine/OpenRefine/security/advisories/GHSA-qfwq-6jh6-8xx4","https://nvd.nist.gov/vuln/detail/CVE-2024-49760","https://github.com/OpenRefine/OpenRefine/commit/24d084052dc55426fe460f2a17524fd18d28b20c","https://github.com/OpenRefine/OpenRefine"],"severity":{"label":"high","score":7.1},"sources":[{"source":"osv","source_id":"GHSA-qfwq-6jh6-8xx4","url":"https://osv.dev/vulnerability/GHSA-qfwq-6jh6-8xx4"}],"summary":"OpenRefine has a path traversal in LoadLanguageCommand"}