CVE-2024-28128

Summary

Cross-site scripting vulnerability exists in FitNesse releases prior to 20220319, which may allow a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is using the product and accessing a link with a specially crafted certain parameter.

Affected Software

Weaknesses

• Cross-site scripting (XSS)

ADP Enrichment

CISA ADP Vulnrichment

• SSVC:
• Exploitation: none
  • Automatable: no
  • Technical Impact: partial

CVE Program Container

Additional References

• https://github.com/unclebob/fitnesse
• http://fitnesse.org/FitNesseDownload
• https://github.com/unclebob/fitnesse/blob/master/SECURITY.md
• https://jvn.jp/en/jp/JVN94521208/

References

• https://github.com/unclebob/fitnesse
• http://fitnesse.org/FitNesseDownload
• https://github.com/unclebob/fitnesse/blob/master/SECURITY.md
• https://jvn.jp/en/jp/JVN94521208/

• ←Previous
• Next→