{"id":"GHSA-pg82-9w35-3w3r","summary":"FitNesse Cross-site scripting","details":"Cross-site scripting vulnerability exists in FitNesse releases prior to 20241026. If this vulnerability is exploited, an arbitrary script may be executed on the web browser of the user who is using the product.","aliases":["CVE-2024-39610"],"modified":"2024-11-20T18:42:22.685177Z","published":"2024-11-15T06:30:33Z","database_specific":{"cwe_ids":["CWE-79"],"severity":"MODERATE","github_reviewed":true,"github_reviewed_at":"2024-11-20T18:29:39Z","nvd_published_at":"2024-11-15T06:15:04Z"},"references":[{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2024-39610"},{"type":"WEB","url":"https://fitnesse.org/FitNesseDownload"},{"type":"PACKAGE","url":"https://github.com/unclebob/fitnesse"},{"type":"WEB","url":"https://github.com/unclebob/fitnesse/releases/tag/20241026"},{"type":"WEB","url":"https://jvn.jp/en/jp/JVN36791327"}],"affected":[{"package":{"name":"org.fitnesse:fitnesse","ecosystem":"Maven","purl":"pkg:maven/org.fitnesse/fitnesse"},"ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"20241026"}]}],"versions":["20050731","20060719","20070619","20080702","20080812","20081201","20111025","20121220","20130530","20130531","20131109","20131110","20140201","20140418","20140623","20140630","20140901","20150114","20150226","20150424","20150814","20151230","20160515","20160618","20161106","20171210","20171212","20180127","20181221","20181223","20181224","20190110","20190118","20190119","20190127","20190202","20190216","20190224","20190406","20190409","20190416","20190417","20190418","20190421","20190428","20190508","20190620","20190628","20190716","20191110","20191217","20191229","20200108","20200128","20200205","20200304","20200307","20200308","20200404","20200501","20201213","20210410","20210516","20210605","20210606","20211006","20211030","20220319","20220815","20221102","20221219","20230503","20231029","20231203","20240219","20240707","20241023"],"database_specific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2024/11/GHSA-pg82-9w35-3w3r/GHSA-pg82-9w35-3w3r.json"}}],"schema_version":"1.9.0","severity":[{"type":"CVSS_V3","score":"CVSS:3.0/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N"}]}