TI-2023-26758 CVE-2023-49093 · GHSA-37vq-hr2f-g7h7
HtmlUnit vulnerable to Remote Code Execution (RCE) via XSTL
Priority HIGH 82
HtmlUnit is a GUI-less browser for Java programs.
Vulnerabilities
6 records
TI-2023-02621 CVE-2023-2798 · GHSA-rc44-5cmh-879m
Denial of service in HtmlUnit
Priority LOW 35
Those using HtmlUnit to browse untrusted webpages may be vulnerable to Denial of service attacks (DoS).
TI-2023-11344 CVE-2023-26119 · GHSA-3xrr-7m6p-p7xh
Code injection in net.sourceforge.htmlunit:htmlunit
Priority MEDIUM 54
Versions of the package net.sourceforge.htmlunit:htmlunit from 0 and before 3.0.0 are vulnerable to Remote Code Execution (RCE) via XSTL, when browsing the attacker’s webpage.
TI-2022-12000 CVE-2022-29546 · GHSA-6jmm-mp6w-4rrg
HtmlUnit NekoHtml Parser before 2.61.0 suffers from a denial of service vulnerability.
Priority LOW 35
HtmlUnit NekoHtml Parser before 2.61.0 suffers from a denial of service vulnerability.
TI-2022-11120 CVE-2022-28366 · GHSA-g9hh-vvx3-v37v
Certain Neko-related HTML parsers allow a denial of service via crafted Processing…
Priority LOW 37
Certain Neko-related HTML parsers allow a denial of service via crafted Processing Instruction (PI) input that causes excessive heap memory consumption.
TI-2020-04499 CVE-2020-5529 · GHSA-5mh9-r3rr-9597
Code injection in HtmlUnit
Priority MEDIUM 45
HtmlUnit prior to 2.37.0 contains code execution vulnerabilities.