FitNesse Cross-site scripting

Mô tả

Tham khảo

• nvd.nist.gov/vuln/detail/CVE-2024-39610 · ADVISORY
• fitnesse.org/FitNesseDownload · WEB
• unclebob/fitnesse · PACKAGE
• unclebob/fitnesse release 20241026 · WEB
• jvn.jp/en/jp/JVN36791327 · WEB
• jvn.jp/en/jp/JVN36791327 · Third Party Advisory

Lỗ hổng khác của org.fitnesse:fitnesse

• CVE-2024-42499TRUNG BÌNH 5.3Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in FitNesse releases prior to 20241026. If this …
• CVE-2024-28128TRUNG BÌNH 6.1Cross-site scripting vulnerability exists in FitNesse releases prior to 20220319, which may allow a remote unauthenticated attacker to execu…
• CVE-2024-28125NGHIÊM TRỌNG 9.8FitNesse all releases allows a remote authenticated attacker to execute arbitrary OS commands. Note: A contributor of FitNesse has claimed t…
• CVE-2014-1216CAO 7.5FitNesse Wiki 20131110, 20140201, and earlier allows remote attackers to execute arbitrary commands by defining a COMMAND_PATTERN and TEST_R…