OpenRefine before 3.2 beta allows directory traversal via a relative pathname in a ZIP archive.
{ "nvd_published_at": "2018-12-05T11:29:00Z", "cwe_ids": [ "CWE-22" ], "severity": "MODERATE", "github_reviewed": true, "github_reviewed_at": "2023-07-25T00:16:49Z" }