Lucene search
K
Database
Vendors
Products
Years
CVSS
Scanner
Agent Scanning
API Scanning
Manual Audit
Perimeter Scanner
Scanning
Projects
Email
Webhook
Plugins
Resources
Documents
Blog
Glossary
FAQ
Pricing
Contacts
About Us
Partners
Branding Guideline
cve[email protected]CVE-2023-2798
HistoryMay 25, 2023 - 2:15 p.m.

CVE-2023-2798

2023-05-2514:15:10
CWE-787
CWE-400
[email protected]
web.nvd.nist.gov
94
htmlunit
dos
cve-2023-2798
nvd
security
vulnerability

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.0005 Low

EPSS

Percentile

16.0%

JSON

Those using HtmlUnit to browse untrusted webpages may be vulnerable to Denial of service attacks (DoS). If HtmlUnit is running on user supplied web pages, an attacker may supply content that causes HtmlUnit to crash by a stack overflow. This effect may support a denial of service attack.This issue affects htmlunit before 2.70.0.

VendorProductVersionCPE
htmlunithtmlunit*cpe:2.3:a:htmlunit:htmlunit:*:*:*:*:*:*:*:*

Related

redhatcve 1
prion 1
github 1
osv 2
ubuntucve 1
cvelist 1
veracode 1
debiancve 1
redhat 2
atlassian 1
ibm 1
redhatcve
redhatcve
CVE-2023-2798
2023-05-27 14:45:55
prion
prion
Stack overflow
2023-05-25 14:15:00
github
github
Unrestricted recursion in htmlunit
2023-05-25 15:30:17
osv
osv
Unrestricted recursion in htmlunit
2023-05-25 15:30:17
CVE-2023-2798
2023-05-25 14:15:10
ubuntucve
ubuntucve
CVE-2023-2798
2023-05-25 00:00:00
cvelist
cvelist
CVE-2023-2798 Denial of service in HtmlUnit
2023-05-25 13:54:52
veracode
veracode
Denial Of Service (DoS)
2023-06-02 05:33:10
debiancve
debiancve
CVE-2023-2798
2023-05-25 14:15:10
redhat
redhat
(RHSA-2023:3814) Moderate: Migration Toolkit for Runtimes security update
2023-06-27 10:54:42
(RHSA-2023:4627) Important: Migration Toolkit for Applications security and bug fix update
2023-08-14 01:00:22
atlassian
atlassian
DoS (Denial of Service) net.sourceforge.nekohtml:nekohtml in Confluence Data Center and Server
2023-11-03 00:45:43
ibm
ibm
Security Bulletin: IBM Security Verify Governance - Identity Manager has multiple vulnerabilities
2024-04-22 06:05:25

7.5 High

CVSS3

Attack Vector

NETWORK

Attack Complexity

LOW

Privileges Required

NONE

User Interaction

NONE

Scope

UNCHANGED

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

HIGH

CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

7.3 High

AI Score

Confidence

High

5 Medium

CVSS2

Access Vector

NETWORK

Access Complexity

LOW

Authentication

NONE

Confidentiality Impact

NONE

Integrity Impact

NONE

Availability Impact

PARTIAL

AV:N/AC:L/Au:N/C:N/I:N/A:P

0.0005 Low

EPSS

Percentile

16.0%

JSON
Related for CVE-2023-2798
redhatcve1prion1github1osv2ubuntucve1cvelist1veracode1debiancve1redhat2atlassian1ibm1