CVE-2018-19859

OpenRefine before 3.5 allows directory traversal via a relative pathname in a ZIP archive.

Source: CVE-2018-19859