description: FitNesse all releases allows a remote authenticated attacker to execute arbitrary OS commands.
problem types: OS command injection
affected:
{
vendor: unclebob
product: FitNesse
versions:
version: all releases, status: affected
}