FitNesse Security Breach

FitNesse is a fully integrated standalone wiki and acceptance testing framework. A security vulnerability exists in FitNesse that stems from the presence of an XML External Entity Misreference vulnerability that could allow an unauthenticated, remote attacker to obtain sensitive information, alte...