unclebob FitNesse vulnerabilities
6 published CVEs name unclebob FitNesse among the affected products.
- 6Published CVEs6 of them scored
- 0Last 12 monthspublished in the last year
- 1Critical0 more rated high
- 0Known exploitedin CISA's KEV catalog
Newest CVEs
- CVE-2024-39610
Cross-site scripting vulnerability exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an arbitrary script may be executed on…
unclebob · FitNesse
Medium6.1 - CVE-2024-42499
Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in FitNesse releases prior to 20241026. If this vulnerability is…
unclebob · FitNesse
Medium5.3 - CVE-2024-28039
Improper restriction of XML external entity references vulnerability exists in FitNesse all releases, which allows a remote unauthenticated attacker to obtain…
unclebob · FitNesse
Medium5.8 - CVE-2024-28128
Cross-site scripting vulnerability exists in FitNesse releases prior to 20220319, which may allow a remote unauthenticated attacker to execute an arbitrary…
unclebob · FitNesse
Medium6.1 - CVE-2024-28125
FitNesse all releases allows a remote authenticated attacker to execute arbitrary OS commands. Note: A contributor of FitNesse has claimed that this is not a…
unclebob · FitNesse
Critical9.8 - CVE-2024-23604
Cross-site scripting vulnerability exists in FitNesse all releases, which may allow a remote unauthenticated attacker to execute an arbitrary script on the web…
unclebob · FitNesse
Medium5.4