CVE-2014-1216: Fitnesse Wiki

High severity, CVSS 7.5. EPSS: 3.7% chance of exploitation in the next 30 days.

FitNesse Wiki 20131110, 20140201, and earlier allows remote attackers to execute arbitrary commands by defining a COMMAND_PATTERN and TEST_RUNNER in the pageContent parameter when editing a page.

Affected products

• Fitnesse Fitnesse Wiki: up to and including 20140201; version 20131110 only

Published 2014-04-22. Last modified 2026-06-17.