CVE-2024-28128

Name of the Vulnerable Software and Affected Versions FitNesse versions prior to 20220319

Description A cross-site scripting issue exists, which may allow a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is using the product and accessing a link with a specially crafted certain parameter.

Recommendations For versions prior to 20220319, update to a version released after 20220319 to resolve the issue. As a temporary workaround, consider restricting access to links with specially crafted parameters until a patch is available.