CVE-2023-41887: Openrefine

Critical severity, CVSS 9.8. EPSS: 42.5% chance of exploitation in the next 30 days.

OpenRefine is a powerful free, open source tool for working with messy data. Prior to version 3.7.5, a remote code execution vulnerability allows any unauthenticated user to execute code on the server. Version 3.7.5 has a patch for this issue.

Affected products

• Openrefine Openrefine: before 3.7.5 (fixed in 3.7.5)

Published 2023-09-15. Last modified 2026-06-17.