Vulnerabilities > CVE-2024-28128 - Unspecified vulnerability in Cleancoder Fitnesse

047910
CVSS 6.1 - MEDIUM
Attack vector
NETWORK
Attack complexity
LOW
Privileges required
NONE
Confidentiality impact
LOW
Integrity impact
LOW
Availability impact
NONE
network
low complexity
cleancoder
NVD
Published: 2024-03-18
Updated: 2024-11-21

Summary

Cross-site scripting vulnerability exists in FitNesse releases prior to 20220319, which may allow a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is using the product and accessing a link with a specially crafted certain parameter.

Vulnerable Configurations

Part Description Count
Application
Cleancoder
1

References