Skip to content
OpenAdvisories

Package · Maven

net.sourceforge.htmlunit:htmlunit

2 known vulnerabilities.

2 results · Feed

  • Critical 9.8

    HtmlUnit Code Injection vulnerability

    Versions of the package net.sourceforge.htmlunit:htmlunit from 0 and before 3.0.0 are vulnerable to Remote Code Execution (RCE) via XSTL, when browsing the attacker’s webpage.

  • High 8.1

    Code execution vulnerability in HtmlUnit

    HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. HtmlUnit initializes Rhino engine improperly, hence a malicious JavScript code can execute arbitrary Java code on the application. Moreover, when embedded in Android application, Android-specif…