102 matches found
FitNesse Cross-site scripting
Cross-site scripting vulnerability exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the product...
FitNesse Path Traversal
Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an attacker may be able to know whether a file exists at a specific path, and/or obtain some part of the file contents under specif...
CVE-2024-39610
Cross-site scripting vulnerability exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the product...
CVE-2024-42499
Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an attacker may be able to know whether a file exists at a specific path, and/or obtain some part of the file contents under specif...
CVE-2024-39610
CVE-2024-39610 is a cross-site scripting vulnerability in FitNesse releases prior to 20241026. The issue could allow an arbitrary script to run in the web browser of users consuming the affected software. The Connected documents confirm the vulnerability in FitNesse and note the fixed version as ...
CVE-2024-39610
Cross-site scripting vulnerability exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the product...
CVE-2024-39610
Cross-site scripting vulnerability exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the product...
CVE-2024-39610
Cross-site scripting vulnerability exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the product...
CVE-2024-42499
FitNesse (CVE-2024-42499) is affected by an improper limitation of a pathname to a restricted directory (Path Traversal) in releases prior to 20241026. An attacker may determine if a file exists at a given path and possibly obtain parts of file contents under certain conditions. Root cause: pathn...
CVE-2024-42499
Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an attacker may be able to know whether a file exists at a specific path, and/or obtain some part of the file contents under specif...
CVE-2024-42499
Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an attacker may be able to know whether a file exists at a specific path, and/or obtain some part of the file contents under specif...
CVE-2024-42499
Improper limitation of a pathname to a restricted directory 'Path Traversal' issue exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an attacker may be able to know whether a file exists at a specific path, and/or obtain some part of the file contents under specif...
Multiple vulnerabilities in FitNesse
Overview FitNesse provided by unclebob contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 - CVE-2024-39610 Path traversal CWE-22 - CVE-2024-42499 Takeshi Kaneko of GMO Cybersecurity by Ierae, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the...
FitNesse 路径遍历漏洞
FitNesse is a fully integrated standalone acceptance testing framework and wiki open-sourced by Robert C. Martin. A path traversal vulnerability exists in versions prior to FitNesse 20241026, which stems from the presence of a path traversal issue, where an attacker may be able to know if a file...
FitNesse 安全漏洞
FitNesse is a fully integrated standalone acceptance testing framework and wiki open-sourced by Robert C. Martin. A security vulnerability exists in versions prior to FitNesse 20241026, which stems from the presence of a cross-site scripting vulnerability that could allow an attacker to execute...
JVN#36791327: Multiple vulnerabilities in FitNesse
FitNesse provided by unclebob contains multiple vulnerabilities listed below. Cross-site scripting CWE-79 CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N Base Score 6.1 CVE-2024-39610 Path traversal CWE-22 CVSS:3.0/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N Base Score 5.3 CVE-2024-42499 Impact An arbitrary...
GHSA-MJQ8-GG9X-87GR FitNesse Cross-site Scripting vulnerability
Cross-site scripting vulnerability exists in FitNesse releases prior to 20220319, which may allow a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is using the product and accessing a link with a specially crafted certain parameter...
FitNesse Cross-site Scripting vulnerability
Cross-site scripting vulnerability exists in FitNesse releases prior to 20220319, which may allow a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is using the product and accessing a link with a specially crafted certain parameter...