fitnesse kayıtları
fitnesse üreticisine ait 4 yayımlanmış kayıt.
Araştırmacı profili
- KEV’e giren
- 0 · %0
- Silahlaştırılmış
- 0 · %0
- Pre-auth RCE
- 2
- Düzeltme kaydı olan
- %50
- Yayından KEV’e ortanca
- KEV’e giren kayıt yok
Tekrar eden sınıflar
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')1
- CWE-611 Improper Restriction of XML External Entity Reference1
- CWE-78 Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')1
Bu üreticide en sık görülen zafiyet sınıfları: nereye bakmalı.
CWETüm kayıtlar
4 kayıt| Aksiyon | CVE | Zafiyet | Ciddiyet | KEV | EPSS | Yayın |
|---|---|---|---|---|---|---|
39İzleyin | CVE-2024-28125İstismar yok | FitNesse all releases allows a remote authenticated attacker to execute arbitrary OS commands.unclebob · fitnesse · CWE-78 | Kritik9,8 | — | %0,9 | 18 Mar 2024 |
31İzleyin | CVE-2014-1216Kavram kanıtı | FitNesse Wiki 20131110, 20140201, and earlier allows remote attackers to execute arbitrary commands by defining a COMMAND_PATTERN and TEST_Rfitnesse · fitnesse wiki | Yüksek7,5 | — | %3,7 | 22 Nis 2014 |
23İzleyin | CVE-2024-28039İstismar yok | Improper restriction of XML external entity references vulnerability exists in FitNesse all releases, which allows a remote unauthenticated unclebob · fitnesse · CWE-611 | Orta5,8 | — | %0,7 | 18 Mar 2024 |
21İzleyin | CVE-2024-42499İstismar yok | Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in FitNesse releases prior to 20241026.unclebob · fitnesse · CWE-22 | Orta5,3 | — | %0,6 | 15 Kas 2024 |
- CVE-2024-2812539İzleyin
FitNesse all releases allows a remote authenticated attacker to execute arbitrary OS commands.
KritikCVSS 9,8İstismar yokEPSS %0unclebob · fitnesse18 Mar 2024
- CVE-2014-121631İzleyin
FitNesse Wiki 20131110, 20140201, and earlier allows remote attackers to execute arbitrary commands by defining a COMMAND_PATTERN and TEST_R
YüksekCVSS 7,5Kavram kanıtıEPSS %3fitnesse · fitnesse wiki22 Nis 2014
- CVE-2024-2803923İzleyin
Improper restriction of XML external entity references vulnerability exists in FitNesse all releases, which allows a remote unauthenticated
OrtaCVSS 5,8İstismar yokEPSS %0unclebob · fitnesse18 Mar 2024
- CVE-2024-4249921İzleyin
Improper limitation of a pathname to a restricted directory ('Path Traversal') issue exists in FitNesse releases prior to 20241026.
OrtaCVSS 5,3İstismar yokEPSS %0unclebob · fitnesse15 Kas 2024