CVE-2024-28128

Published Mar 18, 2024

Last updated 8 months ago

Overview

Description
Cross-site scripting vulnerability exists in FitNesse releases prior to 20220319, which may allow a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is using the product and accessing a link with a specially crafted certain parameter.
Source
vultures@jpcert.or.jp
NVD status
Awaiting Analysis

Social media

Hype score
Not currently trending