A vulnerability was found in OpenRefine up to 3.8.2. It has been declared as critical. This vulnerability affects unknown code of the file translations-$LANG.json. The manipulation of the argument LANG leads to path traversal.
This vulnerability was named CVE-2024-49760. The attack can be initiated remotely. There is no exploit available.
It is recommended to upgrade the affected component.
![CVE-2024-10131 | infiniflow ragflow up to 0.11.0 llm_app.py add_llm req[‘llm_factory’]/req[‘llm_name’] command injection](https://update.cybetower.swiss/wp-content/themes/Extra/images/post-format-thumb-text.svg)