CVE-2024-28125

The org.fitnesse:fitnesse component is vulnerable to Command Injection in all releases. The root cause is the improper validation of user-supplied input , which allows a remote authenticated attacker to inject and execute arbitrary operating system commands . While some contributors have suggeste...

CVE-2024-28125

FitNesse all releases allows a remote authenticated attacker to execute arbitrary OS commands. Note: A contributor of FitNesse has claimed that this is not a vulnerability but a product specification and this is currently under further investigation...