CVE-2023-49093
HtmlUnit vulnerable to Remote Code Execution (RCE) via XSTL
Summary
HtmlUnit vulnerable to Remote Code Execution (RCE) via XSTL
Original description
The description as published by the source.
HtmlUnit is a GUI-less browser for Java programs. HtmlUnit is vulnerable to Remote Code Execution (RCE) via XSTL, when browsing the attacker’s webpage. This vulnerability has been patched in version 3.9.0
Source: OSV.dev (Open Source Vulnerabilities) NVD GitHub Advisory OSV
Fix status by distribution
Fixed packages published by each distribution for this CVE
- Ubuntu UBUNTU-CVE-2023-49093 htmlunit Fixed in: 2.8-1ubuntu2.1+esm1
References
- advisory github.com
- advisory github.com
- advisory nvd.nist.gov
- web htmlunit.org