TI-2023-26758 CVE-2023-49093 · GHSA-37vq-hr2f-g7h7
HtmlUnit vulnerable to Remote Code Execution (RCE) via XSTL
Priority HIGH 82
HtmlUnit is a GUI-less browser for Java programs.
HtmlUnit
Records7All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical2CVSS 9.0–10.0
CVSS high5CVSS 7.0–8.9
Exploited now
HtmlUnit records in CISA KEVNo HtmlUnit vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
7 records
Priority HIGH 71
HtmlUnit Neko is an HtmlUnit adaptation of NekoHTML.
TI-2023-11344 CVE-2023-26119 · GHSA-3xrr-7m6p-p7xh
Code injection in net.sourceforge.htmlunit:htmlunit
Priority MEDIUM 54
Versions of the package net.sourceforge.htmlunit:htmlunit from 0 and before 3.0.0 are vulnerable to Remote Code Execution (RCE) via XSTL, when browsing the attacker’s webpage.
TI-2020-04499 CVE-2020-5529 · GHSA-5mh9-r3rr-9597
Code injection in HtmlUnit
Priority MEDIUM 45
HtmlUnit prior to 2.37.0 contains code execution vulnerabilities.
TI-2022-11120 CVE-2022-28366 · GHSA-g9hh-vvx3-v37v
Certain Neko-related HTML parsers allow a denial of service via crafted Processing…
Priority LOW 37
Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction (PI) input that causes excessive heap memory consumption.
TI-2023-02621 CVE-2023-2798 · GHSA-rc44-5cmh-879m
Denial of service in HtmlUnit
Priority LOW 35
Those using HtmlUnit to browse untrusted webpages may be vulnerable to Denial of service attacks (DoS).
TI-2022-12000 CVE-2022-29546 · GHSA-6jmm-mp6w-4rrg
HtmlUnit NekoHtml Parser before 2.61.0 suffers from a denial of service vulnerability.
Priority LOW 35
HtmlUnit NekoHtml Parser before 2.61.0 suffers from a denial of service vulnerability.