En resumen
- CVE-2024-28128 es una vulnerabilidad MEDIO (CVSS 6.1) que afecta a org.fitnesse:fitnesse, fitnesse (cleancoder).
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.57%, mayor que el 47.4% de las vulnerabilidades.
- Solución: actualizar a 20220319 o posterior.
Description
Cross-site scripting vulnerability exists in FitNesse releases prior to 20220319, which may allow a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is using the product and accessing a link with a specially crafted certain parameter.
NVD description
Cross-site scripting vulnerability exists in FitNesse releases prior to 20220319, which may allow a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is using the product and accessing a link with a specially crafted certain parameter.
Más vulnerabilidades de org.fitnesse:fitnesse
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free