Skip to content
OpenAdvisories

Package · Ubuntu

htmlunit

3 known vulnerabilities.

3 results · Feed

  • Critical 9.8

    HtmlUnit vulnerable to Remote Code Execution (RCE) via XSTL

    HtmlUnit is a GUI-less browser for Java programs. HtmlUnit is vulnerable to Remote Code Execution (RCE) via XSTL, when browsing the attacker’s webpage. This vulnerability has been patched in version 3.9.0

  • High 7.5

    Denial of service in HtmlUnit

    Those using HtmlUnit to browse untrusted webpages may be vulnerable to Denial of service attacks (DoS). If HtmlUnit is running on user supplied web pages, an attacker may supply content that causes HtmlUnit to crash by a stack overflow. This effect may suppor…

  • High 8.1

    Code execution vulnerability in HtmlUnit

    HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. HtmlUnit initializes Rhino engine improperly, hence a malicious JavScript code can execute arbitrary Java code on the application. Moreover, when embedded in Android application, Android-specif…