Lucene search
K

Command Injection

🗓️ 28 Oct 2025 16:21:19Reported by Veracode Vulnerability DatabaseType 
veracode
 veracode
🔗 sca.analysiscenter.veracode.com👁 2 Views

FitNesse is vulnerable to command injection due to improper input validation, allowing authenticated attackers to execute OS commands.

Related
Detection
Refs
ReporterTitlePublishedViews
Family
Circl
CVE-2024-28125
18 Mar 202409:21
circl
CNNVD
FitNesse Security Breach
18 Mar 202400:00
cnnvd
CVE
CVE-2024-28125
18 Mar 202407:26
cve
Cvelist
CVE-2024-28125
18 Mar 202407:26
cvelist
EUVD
EUVD-2024-1037
3 Oct 202520:07
euvd
Github Security Blog
FitNesse allows execution of arbitrary OS commands
18 Mar 202409:30
github
Japan Vulnerability Notes
JVN#94521208: Multiple vulnerabilities in FitNesse
18 Mar 202400:00
jvn
Japan Vulnerability Notes
Multiple vulnerabilities in FitNesse
18 Mar 202405:08
jvn
NVD
CVE-2024-28125
18 Mar 202408:15
nvd
OSV
GHSA-X9R9-48RM-4XM6 FitNesse allows execution of arbitrary OS commands
18 Mar 202409:30
osv
Rows per page
Vulners
Node
fitnessefitnesseRange2005073120240707java
OR
fitnessefitnesseMatch20050731java
OR
fitnessefitnesseMatch20060719java
OR
fitnessefitnesseMatch20070619java
OR
fitnessefitnesseMatch20080702java
OR
fitnessefitnesseMatch20080812java
OR
fitnessefitnesseMatch20081201java
OR
fitnessefitnesseMatch20111025java
OR
fitnessefitnesseMatch20121220java
OR
fitnessefitnesseMatch20130530java
OR
fitnessefitnesseMatch20130531java
OR
fitnessefitnesseMatch20131109java
OR
fitnessefitnesseMatch20131110java
OR
fitnessefitnesseMatch20140201java
OR
fitnessefitnesseMatch20140418java
OR
fitnessefitnesseMatch20140623java
OR
fitnessefitnesseMatch20140630java
OR
fitnessefitnesseMatch20140901java
OR
fitnessefitnesseMatch20150114java
OR
fitnessefitnesseMatch20150226java
OR
fitnessefitnesseMatch20150424java
OR
fitnessefitnesseMatch20150814java
OR
fitnessefitnesseMatch20151230java
OR
fitnessefitnesseMatch20160515java
OR
fitnessefitnesseMatch20160618java
OR
fitnessefitnesseMatch20161106java
OR
fitnessefitnesseMatch20171210java
OR
fitnessefitnesseMatch20171212java
OR
fitnessefitnesseMatch20180127java
OR
fitnessefitnesseMatch20181221java
OR
fitnessefitnesseMatch20181223java
OR
fitnessefitnesseMatch20181224java
OR
fitnessefitnesseMatch20190110java
OR
fitnessefitnesseMatch20190118java
OR
fitnessefitnesseMatch20190119java
OR
fitnessefitnesseMatch20190127java
OR
fitnessefitnesseMatch20190202java
OR
fitnessefitnesseMatch20190216java
OR
fitnessefitnesseMatch20190224java
OR
fitnessefitnesseMatch20190406java
OR
fitnessefitnesseMatch20190409java
OR
fitnessefitnesseMatch20190416java
OR
fitnessefitnesseMatch20190417java
OR
fitnessefitnesseMatch20190418java
OR
fitnessefitnesseMatch20190421java
OR
fitnessefitnesseMatch20190428java
OR
fitnessefitnesseMatch20190508java
OR
fitnessefitnesseMatch20190620java
OR
fitnessefitnesseMatch20190628java
OR
fitnessefitnesseMatch20190716java
OR
fitnessefitnesseMatch20191110java
OR
fitnessefitnesseMatch20191217java
OR
fitnessefitnesseMatch20191229java
OR
fitnessefitnesseMatch20200108java
OR
fitnessefitnesseMatch20200128java
OR
fitnessefitnesseMatch20200205java
OR
fitnessefitnesseMatch20200304java
OR
fitnessefitnesseMatch20200307java
OR
fitnessefitnesseMatch20200308java
OR
fitnessefitnesseMatch20200404java
OR
fitnessefitnesseMatch20200501java
OR
fitnessefitnesseMatch20201213java
OR
fitnessefitnesseMatch20210410java
OR
fitnessefitnesseMatch20210516java
OR
fitnessefitnesseMatch20210605java
OR
fitnessefitnesseMatch20210606java
OR
fitnessefitnesseMatch20211006java
OR
fitnessefitnesseMatch20211030java
OR
fitnessefitnesseMatch20220319java
OR
fitnessefitnesseMatch20220815java
OR
fitnessefitnesseMatch20221102java
OR
fitnessefitnesseMatch20221219java
OR
fitnessefitnesseMatch20230503java
OR
fitnessefitnesseMatch20231029java
OR
fitnessefitnesseMatch20231203java
OR
fitnessefitnesseMatch20240219java

Data

Build on a solid foundation with Vulners data

We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data

Api

Power your application with Vulners API

The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access

App

Assess and manage vulnerabilities with Vulners tools

Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation

13 Dec 2025 05:21Current
7.5High risk
Vulners AI Score7.5
CVSS 3.19.8
EPSS0.0051
SSVC
2