Mageia 7: 2021-0148 Critical Advisory: HtmlUnit Java Execution Risk
mageia
March 21, 2021
It was discovered that HtmlUnit incorrectly initialized Rhino engine
Summary
It was discovered that HtmlUnit incorrectly initialized Rhino engine. An
Attacker could possibly use this issue to execute arbitrary Java code
(CVE-2020-5529).
References
- https://bugs.mageia.org/show_bug.cgi?id=27167
- https://ubuntu.com/security/notices/USN-4584-1
- https://www.cve.org/CVERecord?id=CVE-2020-5529
Resolution
SRPMS
- 7/core/htmlunit-2.23-2.1.mga7
PREVIOUS
NEXT
Severity
critical
Lowest
Low
Medium
High
Critical
Publication date: 21 Mar 2021
URL: https://advisories.mageia.org/MGASA-2021-0148.html
Type: security
CVE: CVE-2020-5529
Get the latest News and Insights
Get the latest Linux and open source security news straight to your inbox.
Related News
Powered By
Linux Security - Your source for Top Linux News, Advisories, HOWTOs and Feature Releases
QUICK LINKS
subscribe to newsletters!
Like staying secure? So do we.
Sign up for updates, tips, and alerts!