Read the docs

Vulnerabilities

Filters

Reset all
Threatist priority
Signals
Fix status
Impact type
Attack vector
Requirements
Product

Products as named in CPE, with their records.

Published
Weakness (CWE)
2 selected

3 records

Vendor: unclebob Component: Fitnesse Clear all filters
TI-2024-26540 CVE-2024-39610 · GHSA-pg82-9w35-3w3r

Cross-site scripting in unclebob FitNesse

Priority LOW 28

Cross-site scripting vulnerability exists in FitNesse releases prior to 20241026.

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00443 Published 2024-11-15 Fixed in 20241026 CWE-79
TI-2024-18707 CVE-2024-28128 · GHSA-mjq8-gg9x-87gr

Cross-site scripting in unclebob FitNesse

Priority LOW 28

Cross-site scripting vulnerability exists in FitNesse releases prior to 20220319, which may allow a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is using the product a…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.0057 Published 2024-03-18 Fixed in 20220319 CWE-79
TI-2024-15626 CVE-2024-23604 · GHSA-8xjc-25qh-f5x2

Cross-site scripting in unclebob FitNesse

Priority LOW 28

Cross-site scripting vulnerability exists in FitNesse all releases, which may allow a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is using the product and accessing a…

CVSS 3.1MEDIUM 6.1 Network No auth User interaction EPSS 0.00574 Published 2024-03-18 No fix listed CWE-79