En resumen
- CVE-2024-42499 es una vulnerabilidad MEDIO (CVSS 5.3) que afecta a org.fitnesse:fitnesse.
- Probabilidad de explotación en los próximos 30 días (EPSS): 0.67%, mayor que el 52.1% de las vulnerabilidades.
- Solución: actualizar a 20241026 o posterior.
Description
Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an attacker may be able to know whether a file exists at a specific path, and/or obtain some part of the file contents under specific conditions.
NVD description
Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an attacker may be able to know whether a file exists at a specific path, and/or obtain some part of the file contents under specific conditions.
Más vulnerabilidades de org.fitnesse:fitnesse
Ver todo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free