Description (CNA)
HtmlUnit is a GUI-less browser for Java programs. HtmlUnit is vulnerable to Remote Code Execution (RCE) via XSTL, when browsing the attacker’s webpage. This vulnerability has been patched in version 3.9.0
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| HtmlUnit / htmlunit | affected < 3.9.0 |
CWE
CWE-94
References
- https://github.com/HtmlUnit/htmlunit/security/advisories/GHSA-37vq-hr2f-g7h7
- https://www.htmlunit.org/changes-report.html#a3.9.0
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.