In short
- CVE-2024-42499 is a MEDIUM (CVSS 5.3) vulnerability affecting org.fitnesse:fitnesse.
- Chance of exploitation in the next 30 days (EPSS): 0.67%, higher than 52.0% of all vulnerabilities.
- Fix: update to 20241026 or later.
Description
Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an attacker may be able to know whether a file exists at a specific path, and/or obtain some part of the file contents under specific conditions.
NVD description
Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an attacker may be able to know whether a file exists at a specific path, and/or obtain some part of the file contents under specific conditions.
More vulnerabilities in org.fitnesse:fitnesse
See all →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free