CVE-2023-26119: Code Injection
Versions of the package net.sourceforge.htmlunit:htmlunit from 0 and before 3.0.0 are vulnerable to Remote Code Execution (RCE) via XSTL, when browsing the attacker’s webpage.
Other sources
Versions of the package net.sourceforge.htmlunit:htmlunit from 0 and before 3.0.0 are vulnerable to Remote Code Execution (RCE) via XSTL, when browsing the attacker’s webpage.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
maven/net.sourceforge.htmlunit:htmlunitto a version that resolves this vulnerability.Fixed in 3.0.0 - Upgrade
Upgrade
net.sourceforge.htmlunit:htmlunitto a version that resolves this vulnerability.Fixed in 3.0.0
Event History
Frequently Asked Questions
What is the severity of CVE-2023-26119?
The severity of CVE-2023-26119 is critical with a severity value of 9.8.
What is the vulnerability in CVE-2023-26119?
The vulnerability in CVE-2023-26119 is Remote Code Execution (RCE) via XSTL.
How can the package net.sourceforge.htmlunit:htmlunit be affected by CVE-2023-26119?
Versions of the package net.sourceforge.htmlunit:htmlunit from 0 and before 3.0.0 are affected by CVE-2023-26119.
How can I fix CVE-2023-26119?
To fix CVE-2023-26119, update the package net.sourceforge.htmlunit:htmlunit to version 3.0.0 or above.
Where can I find more information about CVE-2023-26119?
You can find more information about CVE-2023-26119 at the following references: [link1], [link2], [link3].