Description
Cross-site scripting vulnerability exists in FitNesse releases prior to 20220319, which may allow a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is using the product and accessing a link with a specially crafted certain parameter.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| unclebob | FitNesse | releases prior to 20220319 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.fitnesse:fitnesse | < 20220319 | 20220319 | GHSA-mjq8-gg9x-87gr |