Em resumo
- CVE-2024-42499 é uma vulnerabilidade MÉDIO (CVSS 5.3) que afeta org.fitnesse:fitnesse.
- Chance de exploração nos próximos 30 dias (EPSS): 0.67%, maior que 52.1% das vulnerabilidades.
- Correção: atualize para 20241026 ou posterior.
Description
Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an attacker may be able to know whether a file exists at a specific path, and/or obtain some part of the file contents under specific conditions.
NVD description
Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an attacker may be able to know whether a file exists at a specific path, and/or obtain some part of the file contents under specific conditions.
Mais vulnerabilidades de org.fitnesse:fitnesse
Ver tudo →Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free