Skip to content
OpenAdvisories
High USN-4584-1 1 CVE

htmlunit vulnerability

Published Oct 15, 2020 · Updated Apr 27, 2026

Summary

It was discovered that HtmlUnit incorrectly initialized Rhino engine. An
Attacker could possibly use this issue to execute arbitrary Java code.

Fixed packages 1

ReleasePackageFixed in
Ubuntu · 16.04 LTS 16.04:LTS htmlunit 2.8-1ubuntu2.1

Vulnerabilities 1

  • High 8.1

    Code execution vulnerability in HtmlUnit

    HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. HtmlUnit initializes Rhino engine improperly, hence a malicious JavScript code can execute arbitrary Java code on the application. Moreover, when embedded in Android application, Android-specif…

References

  • report
    https://ubuntu.com/security/CVE-2020-5529