writeups.xyz / Unzipping Dangers: OpenRefine Zip Slip Vulnerability

Submitter : c2a

Date: 27 September 2023

Bounty : undisclosed

Vulnerabilities :

• Zip Slip Attack
• Arbitrary Code Execution
• Path Traversal
• Security Code Review

Programs :

• OpenRefine

Authors :

• Stefan Schiller (@Scryh_)

Link :
https://www.sonarsource.com/blog/openrefine-zip-slip/