GHSA-rc44-5cmh-879m

ghsaUSosv

Unrestricted recursion in htmlunit

view advisory published 2023-05-25Licence: CC-BY-4.0

Those using HtmlUnit to browse untrusted webpages may be vulnerable to Denial of service attacks (DoS). If HtmlUnit is running on user supplied web pages, an attacker may supply content that causes HtmlUnit to crash by a stack overflow. This effect may support a denial of service attack. This issue affects HtmlUnit before 2.70.0.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2023-2798US	high7.5	0.91% (60th)	—	2023-05-25
Those using HtmlUnit to browse untrusted webpages may be vulnerable to Denial of service attacks (DoS). If HtmlUnit is running on user supplied web pages, an attacker may supply co…

references

External citations — patches, advisories, analysis.

https://bugs.chromium.org/p/oss-fuzz/issues/detail?id=54613WEB
https://github.com/HtmlUnit/htmlunitPACKAGE
https://github.com/HtmlUnit/htmlunit/commit/940dc7fdWEB
https://github.com/HtmlUnit/htmlunit/releases/tag/2.70.0WEB
https://nvd.nist.gov/vuln/detail/CVE-2023-2798ADVISORY

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan