CVE-2014-1216
fitnesse fitnesse wiki: no CVSS score yet. EPSS 3.7% chance of exploitation in the next 30 days. Fixed in org.fitnesse:fitnesse 20140418.
FitNesse Wiki 20131110, 20140201, and earlier allows remote attackers to execute arbitrary commands by defining a COMMAND_PATTERN and TEST_RUNNER in the pageContent parameter when editing a page.
- EPSS
- 3.7% chance of exploitation in the next 30 days; higher than 89% of CVEs (scores of 2026-10-31)
- Published
- Modified
- Record from
- the NVD, synced
Affected
- fitnesse:fitnesse_wiki
Packages (OSV)
| Advisory | Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|---|
| GHSA-mpx3-mx2p-9gv3 | Maven | org.fitnesse:fitnesse | >=20131110 <20140418 | 20140418 |