Fitnesse (Jenkins) - vulnerabilities (CVEs)

3 CVEs, 0 in the last 30 days, 32 known versions, newest CVE from 2026-06-24. Vendor: Jenkins.

CVEs of Fitnesse

• CVE-2026-57302 - CVSS 4.3 (medium), 2026-06-24: Jenkins FitNesse Plugin 1.36 and earlier stores passwords unencrypted in job config.xml files on the Jenkins controller, where they can be viewed by users…
• CVE-2020-2175 - CVSS 5.4 (medium), 2020-04-07: Jenkins FitNesse Plugin 1.31 and earlier does not correctly escape report contents before showing them on the Jenkins UI, resulting in a stored cross-site…
• CVE-2020-2120 - CVSS 8.8 (high), 2020-02-12: Jenkins FitNesse Plugin 1.30 and earlier does not configure the XML parser to prevent XML external entity (XXE) attacks.