-
CVSS Score
-| Package Name | Ecosystem | Vulnerable Versions | First Patched Version |
|---|---|---|---|
| org.fitnesse:fitnesse | maven | < 20241026 | 20241026 |
The XSS vulnerability (CWE-79) implies improper input sanitization during web page generation. FitNesse's wiki functionality involves rendering user-editable content, making page rendering responders prime candidates. The WikiPageResponder and EditingResponder are core components handling page display and editing operations. Without patch details, these are inferred based on: (1) XSS typically occurs in content rendering paths, (2) FitNesse's architecture centralizes rendering in responder classes, and (3) the 'medium' confidence reflects the absence of explicit code/patch evidence but aligns with vulnerability patterns.