Fitnesse

fitnesse

Vendor: Cleancoder • 3 CVEs

CVEs (3)

CVE VENDORS PRODUCTS UPDATED PUBLISHED CVSS
CVE-2024-39610 1Cleancoder 1Fitnesse Jun 17, 2026 Nov 15, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Cross-site scripting vulnerability exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the product.
CVE-2024-28128 1Cleancoder 1Fitnesse Jun 17, 2026 Mar 18, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Cross-site scripting vulnerability exists in FitNesse releases prior to 20220319, which may allow a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is using the product a...Show more Cross-site scripting vulnerability exists in FitNesse releases prior to 20220319, which may allow a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is using the product and accessing a link with a specially crafted certain parameter.Show less
CVE-2024-23604 1Cleancoder 1Fitnesse Jun 17, 2026 Mar 18, 2024 N/A· v4 6.1 MEDIUM· v3 N/A· v2 Cross-site scripting vulnerability exists in FitNesse all releases, which may allow a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is using the product and accessing a...Show more Cross-site scripting vulnerability exists in FitNesse all releases, which may allow a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is using the product and accessing a link with specially crafted multiple parameters.Show less