PT-2024-22228 · Fitnesse · Fitnesse
CVSS v3.1
5.8
Medium
| Vector | AV:N/AC:L/PR:N/UI:N/S:C/C:L/I:N/A:N |
Name of the Vulnerable Software and Affected Versions
FitNesse (all releases)
Description
The issue allows a remote unauthenticated attacker to obtain sensitive information, alter data, or cause a denial-of-service (DoS) condition due to improper restriction of XML external entity references.
Recommendations
For all releases, consider restricting or disabling XML external entity references to minimize the risk of exploitation until a patch is available.
Fix
XXE
Found an issue in the description? Have something to add? Feel free to write us 👾
Weakness Enumeration
Related Identifiers
Affected Products
Fitnesse