description: Improper restriction of XML external entity references vulnerability exists in FitNesse all releases, which allows a remote unauthenticated attacker to obtain sensitive information, alter data, or cause a denial-of-service (DoS) condition.
problem types: XML external entities (XXE)
affected:
{
vendor: unclebob
product: FitNesse
versions:
version: all releases, status: affected
}