Description
Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an attacker may be able to know whether a file exists at a specific path, and/or obtain some part of the file contents under specific conditions.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| unclebob | FitNesse | releases prior to 20241026 | — |
Affected packages
| Ecosystem | Package | Affected | Fixed | Record |
|---|---|---|---|---|
| Maven | org.fitnesse:fitnesse | < 20241026 | 20241026 | GHSA-q297-5ff8-hc92 |