Staging Environment: Content and features may be unstable or change without notice.

Advisory Weakness Curation

CVE-2014-1216

Progress 0 / 0

Advisory Summaries

github_osv/GHSA-mpx3-mx2p-9gv3

Improper Neutralization of Special Elements used in a Command in FitNesse Wiki FitNesse Wiki 20131110, 20140201, and earlier allows remote attackers to execute arbitrary commands by defining a COMMAND_PATTERN and TEST_RUNNER in the pageContent parameter when editing a page.

gitlab/maven/org.fitnesse/fitnesse/CVE-2014-1216

Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection') FitNesse Wiki 20131110, 20140201, and earlier allows remote attackers to execute arbitrary commands by defining a COMMAND_PATTERN and TEST_RUNNER in the pageContent parameter when editing a page.