Filtered by vendor Fitnesse Subscriptions
Filtered by product Fitnesse Subscriptions
Total 2 CVE
CVE Vendors Products Updated CVSS v3.1
CVE-2024-28125 1 Fitnesse 1 Fitnesse 2024-11-21 9.8 Critical
FitNesse all releases allows a remote authenticated attacker to execute arbitrary OS commands. Note: A contributor of FitNesse has claimed that this is not a vulnerability but a product specification and this is currently under further investigation.
CVE-2024-42499 1 Fitnesse 1 Fitnesse 2024-11-18 5.3 Medium
Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an attacker may be able to know whether a file exists at a specific path, and/or obtain some part of the file contents under specific conditions.