231 matches found
CVE-2020-5529
HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. HtmlUnit initializes Rhino engine improperly, hence a malicious JavScript code can execute arbitrary Java code on the application. Moreover, when embedded in Android application, Android-specific initialization of Rhino engine is...
CVE-2020-5529
HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. HtmlUnit initializes Rhino engine improperly, hence a malicious JavScript code can execute arbitrary Java code on the application. Moreover, when embedded in Android application, Android-specific initialization of Rhino engine is...
CVE-2020-5529
HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. HtmlUnit initializes Rhino engine improperly, hence a malicious JavScript code can execute arbitrary Java code on the application. Moreover, when embedded in Android application, Android-specific initialization of Rhino engine is...
CVE-2020-5529
CVE-2020-5529 affects HtmlUnit prior to 2.37.0, where improper Rhino engine initialization enables a malicious JavaScript to execute arbitrary Java code within the application. The issue also extends to Android environments where Android-specific Rhino initialization is mishandled, allowing simil...
CVE-2020-5529: Improper Initialization
HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. HtmlUnit initializes Rhino engine improperly, hence a malicious JavScript code can execute arbitrary Java code on the application. Moreover, when embedded in Android application, Android-specific initialization of Rhino engine is...
PT-2020-18504 · Htmlunit +1 · Htmlunit +1
Name of the Vulnerable Software and Affected Versions: HtmlUnit versions prior to 2.37.0 Description: The issue is related to improper initialization of the Rhino engine in HtmlUnit, allowing malicious JavaScript code to execute arbitrary Java code on the application. This problem also affects...
HtmlUnit vulenerable to arbitrary code execution
Overview HtmlUnit is a Java-based library which provides web browser functionality to Java programs, and it supports JavaScript evaluation with embedded Mozilla Rhino engine. Mozilla Rhino engine offers a feature to make Java objects available from JavaScript. HtmlUnit initializes Rhino engine...
JVN#34535327: HtmlUnit vulenerable to arbitrary code execution
HtmlUnit is a Java-based library which provides web browser functionality to Java programs, and it supports JavaScript evaluation with embedded Mozilla Rhino engine. Mozilla Rhino engine offers a feature to make Java objects available from JavaScript. HtmlUnit initializes Rhino engine improperly,...
HtmlUnit Code Execution Vulnerability
HtmlUnit is a Java-based library . A code execution vulnerability exists in HtmlUnit that can be exploited by an attacker to execute arbitrary Java code...
com.github.seykron:htmlunit-runner-freemarker (1.0), org.springframework:spring-mock (2.0) +1 more potentially affected by CVE-2016-9878 via org.springframework:spring-webmvc (2.0)
org.springframework:spring-webmvc MAVEN version 2.0 is affected by a known vulnerability. The following packages have a transitive dependency on org.springframework:spring-webmvc and may be impacted: - com.github.seykron:htmlunit-runner-freemarker 1.0 - org.springframework:spring-mock 2.0 -...
com.canoo:webtest (>=586, <=1393), com.flexiblewebsolutions.xdriveunit:xdriveunit (0.3) +79 more potentially affected by CVE-2017-12621 via commons-jelly:commons-jelly (>=1.0-beta-4, <=1.0)
commons-jelly:commons-jelly MAVEN version =1.0-beta-4, =586, =0.1, =1.0, =20050708.205531, =1.2, =1.0-m5, =1.0.1, =1.3, =1.9 - jepi:jepi 1.0 - marmalade:marmalade-compat-jelly 1.0-alpha-3 - maven-plugins:maven-sourceforge-plugin 1.3 and more Source cves: CVE-2017-12621 Source advisory:...