Improper Neutralization of Special Elements used in a Command in FitNesse Wiki

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2014-1216 · ADVISORY
• exploit-db.com/exploits/32568 · WEB
• secpod.org/blog
• portcullis-security.com/security-research-and-downloads/security-advisories/cve-2014-1216 · Exploit

Lỗ hổng khác của org.fitnesse:fitnesse

• CVE-2024-42499TRUNG BÌNH 5.3Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in FitNesse releases prior to 20241026. If this …
• CVE-2024-39610TRUNG BÌNH 6.1Cross-site scripting vulnerability exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an arbitrary script ma…
• CVE-2024-28128TRUNG BÌNH 6.1Cross-site scripting vulnerability exists in FitNesse releases prior to 20220319, which may allow a remote unauthenticated attacker to execu…
• CVE-2024-28125NGHIÊM TRỌNG 9.8FitNesse all releases allows a remote authenticated attacker to execute arbitrary OS commands. Note: A contributor of FitNesse has claimed t…