HIGHVulnerability
Verified
Global

NVD HIGH: CVE-2026-108553 — OpenRefine through 3.10.1 contains a cross-site request forgery vulnerability in...

·Source: NIST NVD

Updated:

Executive Summary

OpenRefine through 3.10.1 contains a cross-site request forgery vulnerability in the get-rows command that allows remote attackers to execute Jython facet expressions. Attackers can lure a user to a malicious page issuing a cross-origin GET with a crafted engine parameter, executing operating system commands as the OpenRefine user.

Analysis

OpenRefine through 3.10.1 contains a cross-site request forgery vulnerability in the get-rows command that allows remote attackers to execute Jython facet expressions. Attackers can lure a user to a malicious page issuing a cross-origin GET with a crafted engine parameter, executing operating system commands as the OpenRefine user. CVSS Score: 7.5. Published: 2026-10-10T15:16:58.410.

Indicators of Compromise (1)

CVE (1)
CVE-2026-108553
NVDMITRE CVE
Source Attribution

Originally published by NIST NVD on Oct 10, 2026. Verified by: NIST.

Related Threats

MEDIUMVulnerability

CVE-2026-109618 and CVE-2026-109619 Are Two Directions Through the Same Pre-RINIT Window

[object Object]

CVE-2026-109618CVE-2026-109619
r/netsec
LOWVulnerability

Fintechs top banks and stablecoins for cheap cross-border payment - BIS research

Cross-border payments remain slow and expensive but fintech outfits such as Wise and Remitly have substantially cut costs relative to traditional retail bank wires while stabelcoins still suffer from issues with friction, according to BIS research.

Finextra
MEDIUMVulnerability

More and More Cyber Jobs Require AI Expertise

<img src="https://ismg-cdn.nyc3.cdn.digitaloceanspaces.com/articles/more-more-cyber-jobs-require-ai-expertise-image_small-2-a-33170.jpg" align=right hspace=4><b>But There's No Consensus Way to Assess Levels of Skill</b><br>A growing number of cybersecurity jobs require not just a baseline familiarity with AI tools, but significant AI expertise, according to an analysis of validated job vacancies i

Bank Info Security