CVE-2023-49093 (published 2023-12-04T04:47:27.145Z)
HtmlUnit is a GUI-less browser for Java programs. HtmlUnit is vulnerable to Remote Code Execution (RCE) via XSTL, when browsing the attacker’s webpage. This vulnerability has been patched in version 3.9.0
Affected products: Vendor: HtmlUnit
Product: htmlunit
Versions: < 3.9.0