Vulnerability in Fitnesse Wiki
CVE-2014-1216
FitNesse Wiki 20131110, 20140201, and earlier allows remote attackers to execute arbitrary commands by defining a COMMAND_PATTERN and TEST_RUNNER in the pageContent parameter when editing a page.
EPSS: 0.039 (89.3th percentile) — read the EPSS interpretation.
Affected products
- Fitnesse Fitnesse_wiki — versions 20131110
- N/a — versions n/a
References
- cve@mitre.org (Exploit, exploit, x_refsource_EXPLOIT-DB)
- cve@mitre.org (Exploit, x_refsource_MISC)
- cve@mitre.org (x_refsource_MISC)