CVE-2024-28125

FitNesse (CVE-2024-28125) is affected by command injection due to improper validation of user-supplied input, enabling a remote authenticated attacker to execute arbitrary OS commands. This aligns with multiple sources describing OS command execution in FitNesse and identifies the vulnerable comp...

CVE-2024-28125

FitNesse all releases allows a remote authenticated attacker to execute arbitrary OS commands. Note: A contributor of FitNesse has claimed that this is not a vulnerability but a product specification and this is currently under further investigation...