https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Sat, 10 Oct 2026 19:25:57 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-202311 EUVD-2026-202311 https://cve.radiocsirt.org/vuln/euvd-2026-202311 https://cve.radiocsirt.org/vuln/fkie_cve-2024-42499 <p>Improper limitation of a pathname to a restricted directory (&#39;Path Traversal&#39;) issue exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an attacker may be able to know whether a file exists at a specific path, and/or obtain some part of the file contents under specific conditions.</p> <p>Improper limitation of a pathname to a restricted directory (&#39;Path Traversal&#39;) issue exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an attacker may be able to know whether a file exists at a specific path, and/or obtain some part of the file contents under specific conditions.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2024-42499 https://cve.radiocsirt.org/vuln/ghsa-q297-5ff8-hc92 <p><strong>Affected:</strong> Maven: org.fitnesse:fitnesse</p> <p>Improper limitation of a pathname to a restricted directory (&#39;Path Traversal&#39;) issue exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an attacker may be able to know whether a file exists at a specific path, and/or obtain some part of the file contents under specific conditions.</p> <p><strong>Affected:</strong> Maven: org.fitnesse:fitnesse</p> <p>Improper limitation of a pathname to a restricted directory (&#39;Path Traversal&#39;) issue exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an attacker may be able to know whether a file exists at a specific path, and/or obtain some part of the file contents under specific conditions.</p> https://cve.radiocsirt.org/vuln/ghsa-q297-5ff8-hc92 https://cve.radiocsirt.org/vuln/jvndb-2024-000119 <p>FitNesse provided by unclebob contains multiple vulnerabilities listed below. &lt;ul&gt;&lt;li&gt;Cross-site scripting (CWE-79) - CVE-2024-39610&lt;/li&gt; &lt;li&gt;Path traversal (CWE-22) - CVE-2024-42499&lt;/li&gt;&lt;/ul&gt; Takeshi Kaneko of GMO Cybersecurity by Ierae, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> <p>FitNesse provided by unclebob contains multiple vulnerabilities listed below. &lt;ul&gt;&lt;li&gt;Cross-site scripting (CWE-79) - CVE-2024-39610&lt;/li&gt; &lt;li&gt;Path traversal (CWE-22) - CVE-2024-42499&lt;/li&gt;&lt;/ul&gt; Takeshi Kaneko of GMO Cybersecurity by Ierae, Inc. reported these vulnerabilities to IPA. JPCERT/CC coordinated with the developer under Information Security Early Warning Partnership.</p> https://cve.radiocsirt.org/vuln/jvndb-2024-000119