pentester.land· Sep 27, 2023· by Stefan Schiller (@scryh_)

Unzipping Dangers: OpenRefine Zip Slip Vulnerability

Open Original Article ↗
Target Program: OpenRefine
🎯 Vulnerability: Web Security Vulnerability
💡 Defense Fix: Implement strict input validation, contextual output encoding, and enforce least-privilege authorization controls.
#Zip Slip attack#Arbitrary Code Execution#Path traversal#Security code review