GitHub Advisoryadvisory · Maven

GHSA-rc44-5cmh-879m Unrestricted recursion in htmlunit

HIGH Published 2023-05-25 Modified 2023-05-25 Official page ↗
Aliases
CVE-2023-2798
Ecosystem
Maven
Packages
org.htmlunit:htmlunit
Severity
High
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H
Weaknesses
CWE-400, CWE-787
Reviewed
2023-05-25

Affected packages

• Maven org.htmlunit:htmlunit: < 2.70.0 → fixed in 2.70.0

Description

Those using HtmlUnit to browse untrusted webpages may be vulnerable to Denial of service attacks (DoS). If HtmlUnit is running on user supplied web pages, an attacker may supply content that causes HtmlUnit to crash by a stack overflow. This effect may support a denial of service attack. This issue affects HtmlUnit before 2.70.0.

Related

Alias · CVE (1)

  • CVE-2023-2798 Those using HtmlUnit to browse untrusted webpages may be vulnerable to Denial of service attacks (DoS). vulnerability

Weakness · CWE (2)

  • CWE-400 Uncontrolled Resource Consumption weakness
  • CWE-787 Out-of-bounds Write weakness

References