HtmlUnit Code Injection vulnerability

Versions of the package net.sourceforge.htmlunit:htmlunit from 0 and before 3.0.0 are vulnerable to Remote Code Execution RCE via XSTL, when browsing the attacker’s webpage...

Security Bulletin: Vulnerability for remote code execution fixed in IBM Security Verify Governance [CVE-2023-26119]

Summary The following security vulnerability for HtmlUnit has been addressed in IBM Security Verify Governance. CVE-2023-26119 Vulnerability Details CVEID:CVE-2023-26119 DESCRIPTION: HtmlUnit could allow a remote attacker to execute arbitrary code on the system, caused by an XSTL code injection...

htmlunit:HtmlParserFuzzer: Security exception in com.code_intelligence.jazzer.sanitizers.ServerSideRequestForgery.checkSsrf

Project: https://github.com/HtmlUnit/htmlunit.git Detailed Report: https://oss-fuzz.com/testcase?key=5187786085629952 Project: htmlunit Fuzzing Engine: libFuzzer Fuzz Target: HtmlParserFuzzer Job Type: libfuzzerasanhtmlunit Platform Id: linux Crash Type: Security exception Crash Address: Crash...

htmlUnit: Stack overflow crash causes Denial of Service (DoS)

A flaw was found in HtmlUnit. This issue may allow a malicious user to supply content to htmlUnit, which could cause a crash by stack overflow, leading to a Denial of Service DoS...

Denial Of Service (DoS)

net.sourceforge.htmlunit:htmlunit is vulnerable to Denial of Service DoS attacks. A malicious user is able to cause a stack based buffer overflow via the getNextElementUpwards function in DomNode.java when ran on user supplied input, which can cause the application to crash...

CVE-2023-2798

A flaw was found in HtmlUnit. This issue may allow a malicious user to supply content to htmlUnit, which could cause a crash by stack overflow, leading to a Denial of Service DoS...

Unrestricted recursion in htmlunit

Those using HtmlUnit to browse untrusted webpages may be vulnerable to Denial of service attacks DoS. If HtmlUnit is running on user supplied web pages, an attacker may supply content that causes HtmlUnit to crash by a stack overflow. This effect may support a denial of service attack. This issue...

GHSA-RC44-5CMH-879M Unrestricted recursion in htmlunit

Those using HtmlUnit to browse untrusted webpages may be vulnerable to Denial of service attacks DoS. If HtmlUnit is running on user supplied web pages, an attacker may supply content that causes HtmlUnit to crash by a stack overflow. This effect may support a denial of service attack. This issue...

CVE-2023-2798

Those using HtmlUnit to browse untrusted webpages may be vulnerable to Denial of service attacks DoS. If HtmlUnit is running on user supplied web pages, an attacker may supply content that causes HtmlUnit to crash by a stack overflow. This effect may support a denial of service attack.This issue...

CVE-2023-2798

Those using HtmlUnit to browse untrusted webpages may be vulnerable to Denial of service attacks DoS. If HtmlUnit is running on user supplied web pages, an attacker may supply content that causes HtmlUnit to crash by a stack overflow. This effect may support a denial of service attack.This issue...

UBUNTU-CVE-2023-2798

Those using HtmlUnit to browse untrusted webpages may be vulnerable to Denial of service attacks DoS. If HtmlUnit is running on user supplied web pages, an attacker may supply content that causes HtmlUnit to crash by a stack overflow. This effect may support a denial of service attack.This issue...

Stack overflow

Those using HtmlUnit to browse untrusted webpages may be vulnerable to Denial of service attacks DoS. If HtmlUnit is running on user supplied web pages, an attacker may supply content that causes HtmlUnit to crash by a stack overflow. This effect may support a denial of service attack.This issue...

CVE-2023-2798 Denial of service in HtmlUnit

Those using HtmlUnit to browse untrusted webpages may be vulnerable to Denial of service attacks DoS. If HtmlUnit is running on user supplied web pages, an attacker may supply content that causes HtmlUnit to crash by a stack overflow. This effect may support a denial of service attack.This issue...

CVE-2023-2798 Denial of service in HtmlUnit

Those using HtmlUnit to browse untrusted webpages may be vulnerable to Denial of service attacks DoS. If HtmlUnit is running on user supplied web pages, an attacker may supply content that causes HtmlUnit to crash by a stack overflow. This effect may support a denial of service attack.This issue...

CVE-2023-2798

Those using HtmlUnit to browse untrusted webpages may be vulnerable to Denial of service attacks DoS. If HtmlUnit is running on user supplied web pages, an attacker may supply content that causes HtmlUnit to crash by a stack overflow. This effect may support a denial of service attack.This issue...

CVE-2023-2798

HtmlUnit is affected by a DoS via a stack overflow when processing untrusted content, with impact unavailability. The issue affects HtmlUnit prior to version 2.70.0; upgrade to 2.70.0 or newer to mitigate. (Sources: CVE-2023-2798, GHSA-rc44-5CMH-879M)

CVE-2023-2798

Removed by vendor...

HtmlUnit 缓冲区错误漏洞

HtmlUnit is an open source java page analysis tool , read the page , you can effectively use HtmlUnit to analyze the content on the page . A security vulnerability exists in HtmlUnit versions prior to 2.70.0, which stems from the possibility of a Denial of Service DoS attack when browsing untrust...

PT-2023-21466 · Htmlunit · Htmlunit

Name of the Vulnerable Software and Affected Versions: htmlunit versions prior to 2.70.0 Description: The issue allows an attacker to cause a denial of service attack by supplying content that causes htmlunit to crash due to a stack overflow when running on user-supplied web pages. This can happe...

CVE-2023-2798: Uncontrolled Resource Consumption

Those using HtmlUnit to browse untrusted webpages may be vulnerable to Denial of service attacks DoS. If HtmlUnit is running on user supplied web pages, an attacker may supply content that causes HtmlUnit to crash by a stack overflow. This effect may support a denial of service attack.This issue...