En bref
- CVE-2024-42499 est une vulnérabilité MOYENNE (CVSS 5.3) touchant org.fitnesse:fitnesse.
- Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 0.67%, plus élevée que 52.0% des vulnérabilités.
- Correctif : mettre à jour vers 20241026 ou plus récent.
Description
Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an attacker may be able to know whether a file exists at a specific path, and/or obtain some part of the file contents under specific conditions.
NVD description
Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an attacker may be able to know whether a file exists at a specific path, and/or obtain some part of the file contents under specific conditions.
Autres vulnérabilités de org.fitnesse:fitnesse
Tout voir →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free