CVE-2024-23604

Cross-site scripting vulnerability exists in FitNesse all releases, which may allow a remote unauthenticated attacker to execute an arbitrary script on the web browser of the user who is using the product and accessing a link with specially crafted multiple parameters.

• CWE-79
• CWE-79

• http://fitnesse.org/FitNesseDownloadProduct, Release Notes
• https://github.com/unclebob/fitnesseProduct
• https://github.com/unclebob/fitnesse/blob/master/SECURITY.mdProduct
• https://jvn.jp/en/jp/JVN94521208/Third Party Advisory
• http://fitnesse.org/FitNesseDownloadProduct, Release Notes
• https://github.com/unclebob/fitnesseProduct
• https://github.com/unclebob/fitnesse/blob/master/SECURITY.mdProduct
• https://jvn.jp/en/jp/JVN94521208/Third Party Advisory

Published

Mar 18, 2024

Last Modified

Jun 17, 2026

Status

Modified

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-23597Cross-site request forgery (CSRF) vulnerability exists in Tv…4.3
• CVE-2024-23599Race condition in Seamless Firmware Updates for some Intel(R…8.3
• CVE-2024-2360parisneo/lollms-webui is vulnerable to path traversal attack…9.8
• CVE-2024-23600Improper Input Validation of query search results for privat…2.7
• CVE-2024-23601A code injection vulnerability exists in the scan_lib.bin fu…9.8
• CVE-2024-23603 An SQL injection vulnerability exists in an undisclosed pag…3.8
• CVE-2024-23605A heap-based buffer overflow vulnerability exists in the GGU…9.8
• CVE-2024-23606An out-of-bounds write vulnerability exists in the sopen_FAM…9.8
• CVE-2024-23607 A directory traversal vulnerability exists in the F5OS QKVi…5.5
• CVE-2024-23608An out of bounds write due to a missing bounds check in LabV…7.8
• CVE-2024-23609An improper error handling vulnerability in LabVIEW may resu…7.8
• CVE-2024-2361A vulnerability in the parisneo/lollms-webui allows for arbi…9.6