CVE-2023-49093
Fixed in a distro release EPSS 2%CVSS 9.8
HtmlUnit is a GUI-less browser for Java programs. HtmlUnit is vulnerable to Remote Code Execution (RCE) via XSTL, when browsing the attacker’s webpage. This vulnerability has been patched in version 3.9.0
Products: htmlunit
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Maven | org.htmlunit:htmlunit | 3.9.0 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu Pro 16.04 LTS | htmlunit | 2.8-1ubuntu2.1+esm1 |
| Ubuntu Pro 18.04 LTS | htmlunit | 2.8-3ubuntu1+esm1 |