Skip to content
CVE PROGRAM SOURCE RECORD9.8 Critical

CVE-2023-49093

HtmlUnit vulnerable to Remote Code Execution (RCE) via XSTL

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
GitHub_M

Description

HtmlUnit is a GUI-less browser for Java programs. HtmlUnit is vulnerable to Remote Code Execution (RCE) via XSTL, when browsing the attacker’s webpage. This vulnerability has been patched in version 3.9.0

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

HtmlUnit htmlunit

  • < 3.9.0affected

References