Description
HtmlUnit 是一个可模拟浏览器的行为的开源 Java 代码仓库。
HtmlUnit <3.0.0 存在远程代码执行漏洞
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2023-26119
https://github.com/advisories/GHSA-3xrr-7m6p-p7xh
https://avd.aliyun.com/detail?id=AVD-2023-26119
https://siebene.github.io/2022/12/30/HtmlUnit-RCE/
https://security.snyk.io/vuln/SNYK-JAVA-NETSOURCEFORGEHTMLUNIT-3252500
https://blog.csdn.net/kali2333/article/details/136476223
https://www.nsfocus.net/vulndb/80817
https://www.oscs1024.com/hd/MPS-2023-5113