Skip to content
OpenAdvisories
Medium · 5.8 CVE-2024-28039 EUVD-2024-25210GHSA-rcfj-pc73-hqv6

Improper restriction of XML external entity references vulnerability exists in FitNesse all releases, which allows a remote unauthenticated…

Published Mar 18, 2024 · Updated Aug 2, 2024 · Assigned by jpcert

Description

Improper restriction of XML external entity references vulnerability exists in FitNesse all releases, which allows a remote unauthenticated attacker to obtain sensitive information, alter data, or cause a denial-of-service (DoS) condition.

Affected products

VendorProductAffectedFixed
unclebob FitNesse all releases —

References