PT-2023-28143 · Unknown+2 · Mysql Connector/J+3
Nbxiglk0
·
Published
2023-09-12
·
Updated
2025-02-10
·
CVE-2023-41886
CVSS v3.1
7.5
High
| Vector | AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
OpenRefine versions prior to 3.7.5
Description
An arbitrary file read issue allows any unauthenticated user to read a file on a server. This is related to the use of the MySQL JDBC connector, where an attacker can exploit the
allowLoadLocalInfile parameter to read files on the server. The vulnerability can be exploited by setting the username to a base64 encoded string of the file path and the Database name to include the allowLoadLocalInfile=true parameter for MySQL connector versions greater than 8.14. For versions less than or equal to 8.14, the default value of allowLoadLocalInfile is true, making it easier to exploit.Recommendations
For OpenRefine versions prior to 3.7.5, update to version 3.7.5 or later to fix the arbitrary file read vulnerability. As a temporary workaround, consider restricting access to the MySQL connector or disabling the
allowLoadLocalInfile parameter to minimize the risk of exploitation. Avoid using the username and Database name parameters in a way that could allow an attacker to read files on the server.Exploit
Fix
SQL injection
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Linuxmint
Mysql Connector/J
Openrefine
Ubuntu