Summary
It was discovered that HtmlUnit was vulnerable to remote code execution
via XSLT when browsing an attacker-controlled webpage. An attacker could possibly use
this issue to execute arbitrary code in the context of the application using HtmlUnit.
Fixed packages 2
| Release | Package | Fixed in |
|---|---|---|
| Ubuntu · Pro 16.04 LTS Pro:16.04:LTS | htmlunit | 2.8-1ubuntu2.1+esm1 |
| Ubuntu · Pro 18.04 LTS Pro:18.04:LTS | htmlunit | 2.8-3ubuntu1+esm1 |
References
-
report
https://ubuntu.com/security/CVE-2023-49093