← Back to browse · API

CVE-2023-26119

Severity
CRITICAL
CVSS
9.8
EPSS
0.02513
Risk score
40.08
CISA KEV
No
PoC
No
Published
2023-04-03
Modified
2024-08-02
First seen
2026-08-08
Aliases
EUVD-2023-1944, GHSA-3XRR-7M6P-P7XH
Products
n/a:net.sourceforge.htmlunit:htmlunit 0 <3.0.0
Sources
euvd EUVD-2023-1944

Description

Versions of the package net.sourceforge.htmlunit:htmlunit from 0 and before 3.0.0 are vulnerable to Remote Code Execution (RCE) via XSTL, when browsing the attacker’s webpage.

References