Improper Neutralization of Special Elements used in a Command in FitNesse Wiki

Description

References

• nvd.nist.gov/vuln/detail/CVE-2014-1216 · ADVISORY
• exploit-db.com/exploits/32568 · WEB
• secpod.org/blog
• portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1216 · Exploit

Altre vulnerabilità di org.fitnesse:fitnesse

• CVE-2024-42499MEDIO 5.3Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in FitNesse releases prior to 20241026. If this …
• CVE-2024-39610MEDIO 6.1Cross-site scripting vulnerability exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an arbitrary script ma…
• CVE-2024-28128MEDIO 6.1Cross-site scripting vulnerability exists in FitNesse releases prior to 20220319, which may allow a remote unauthenticated attacker to execu…
• CVE-2024-28125CRITICO 9.8FitNesse all releases allows a remote authenticated attacker to execute arbitrary OS commands. Note: A contributor of FitNesse has claimed t…