ch.digitalfondue.jscover:jscoverproxy-maven-plugin (>=1.1.0, <=1.1.0.1), com.bowlingx:play-webpack_2.11 (0.1.8) +31 more potentially affected by CVE-2023-26119 via net.sourceforge.htmlunit:htmlunit (2.25)

net.sourceforge.htmlunit:htmlunit MAVEN version 2.25 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.htmlunit:htmlunit and may be impacted: - ch.digitalfondue.jscover:jscoverproxy-maven-plugin =1.1.0, =3.3.0, =3.4.0 -...

com.hack23.cia:testfoundation (2020.4.19) potentially affected by CVE-2023-26119 via net.sourceforge.htmlunit:htmlunit (2.39.1)

net.sourceforge.htmlunit:htmlunit MAVEN version 2.39.1 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.htmlunit:htmlunit and may be impacted: - com.hack23.cia:testfoundation 2020.4.19 Source cves: CVE-2023-26119 Source advisory:...

com.hack23.cia:testfoundation (2022.1.24), io.quarkus.qe:quarkus-test-cli (1.1.0.beta.1) +15 more potentially affected by CVE-2023-26119 via net.sourceforge.htmlunit:htmlunit (2.57.0)

net.sourceforge.htmlunit:htmlunit MAVEN version 2.57.0 is affected by a known vulnerability. The following packages have a transitive dependency on net.sourceforge.htmlunit:htmlunit and may be impacted: - com.hack23.cia:testfoundation 2022.1.24 - io.quarkus.qe:quarkus-test-cli 1.1.0.beta.1 -...

CVE-2023-26119

CVE-2023-26119 affects net.sourceforge.htmlunit:htmlunit. Versions 0 through 2.x (i.e., before 3.0.0) are vulnerable to remote code execution via an XSTL/code injection flaw when loading the attacker’s page. The issue enables an attacker to run arbitrary code on the affected host. Remote exploita...

CVE-2023-26119

Versions of the package net.sourceforge.htmlunit:htmlunit from 0 and before 3.0.0 are vulnerable to Remote Code Execution RCE via XSTL, when browsing the attacker’s webpage...