← Back to browse · API

CVE-2023-49093

Severity
CRITICAL
CVSS
9.8
EPSS
0.02378
Risk score
40.03
CISA KEV
No
PoC
No
Published
2023-12-04
Modified
2024-10-10
First seen
2026-08-07
Aliases
EUVD-2023-3079, GHSA-37VQ-HR2F-G7H7
Products
HtmlUnit:HtmlUnit < 3.9.0
Sources
euvd EUVD-2023-3079

Description

HtmlUnit is a GUI-less browser for Java programs. HtmlUnit is vulnerable to Remote Code Execution (RCE) via XSTL, when browsing the attacker’s webpage. This vulnerability has been patched in version 3.9.0

References