Lucene search
HistoryApr 22, 2014 - 1:06 p.m.
CVE-2014-1216
cve-2014-1216
fitnesse wiki
remote code execution
command_pattern
test_runner
nvd
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
Low
0.064 Low
EPSS
Percentile
93.7%
FitNesse Wiki 20131110, 20140201, and earlier allows remote attackers to execute arbitrary commands by defining a COMMAND_PATTERN and TEST_RUNNER in the pageContent parameter when editing a page.
Affected configurations
Node
fitnessefitnesse_wikiRangeβ€20140201
ORfitnessefitnesse_wikiMatch20131110
| CPE | Name | Operator | Version |
|---|---|---|---|
| fitnesse:fitnesse_wiki | fitnesse fitnesse wiki | le | 20140201 |
| fitnesse:fitnesse_wiki | fitnesse fitnesse wiki | eq | 20131110 |
Related
packetstorm
packetstorm
Fitnesse Wiki 20131110 Remote Command Execution
2014-03-02 00:00:00
Fitnesse Wiki Remote Command Execution
2014-03-28 00:00:00
seebug
seebug
FitnesseθΏη¨δ»£η ζ§θ‘ζΌζ΄
2014-03-05 00:00:00
Fitnesse Wiki Remote Command Execution Vulnerability
2014-07-01 00:00:00
exploitpack
exploitpack
Fitnesse Wiki - Remote Command Execution (Metasploit)
2014-03-28 00:00:00
github
github
zdt
zdt
Fitnesse Wiki 20131110 Remote Command Execution
2014-03-02 00:00:00
Fitnesse Wiki Remote Command Execution Vulnerability
2014-03-29 00:00:00
securityvulns
securityvulns
CVE-2014-1216 - Remote Command Execution in Fitnesse Wiki
2014-05-05 00:00:00
prion
prion
Command injection
2014-04-22 13:06:00
cvelist
cvelist
CVE-2014-1216
2014-04-21 14:00:00
nvd
nvd
CVE-2014-1216
2014-04-22 13:06:28
openvas
openvas
Fitnesse Wiki RCE Vulnerability
2014-03-17 00:00:00
osv
osv
exploitdb
exploitdb
Fitnesse Wiki - Remote Command Execution (Metasploit)
2014-03-28 00:00:00
7.5 High
CVSS2
Attack Vector
NETWORK
Attack Complexity
LOW
Authentication
NONE
Confidentiality Impact
PARTIAL
Integrity Impact
PARTIAL
Availability Impact
PARTIAL
AV:N/AC:L/Au:N/C:P/I:P/A:P
7.4 High
AI Score
Confidence
Low
0.064 Low
EPSS
Percentile
93.7%
Related for CVE-2014-1216