Alerts This Week
Warning Icon 1 745
Alerts This Week
Warning Icon 1 745

Ubuntu 18.04 16.04 HtmlUnit Important Remote Code Exec USN-8220-1

ubuntu
Calendar Grey May 7, 2026
Dist Ubuntu Esm H88
HtmlUnit in Ubuntu could execute code as your login when accessing malicious sites. Immediate updates are required.
HtmlUnit could be made to run programs as your login if it opened a malicious website.

Summary

HtmlUnit could be made to run programs as your login if it

opened a malicious website.

Software Description:

- htmlunit: headless web browser written in Java

Details:

It was discovered that HtmlUnit was vulnerable to remote code execution

via XSLT when browsing an attacker-controlled webpage. An attacker could possibly use

this issue to execute arbitrary code in the context of the application using HtmlUnit.

Topics%20covered

Topics Covered

security advisory remote code execution Ubuntu important malicious website htmlunit

Update Instructions

The problem can be corrected by updating your system to the following
package versions:

Ubuntu 18.04 LTS
  libhtmlunit-java                2.8-3ubuntu1+esm1
                                  Available with Ubuntu Pro

Ubuntu 16.04 LTS
  libhtmlunit-java                2.8-1ubuntu2.1+esm1
                                  Available with Ubuntu Pro

In general, a standard system update will make all the necessary changes.

References

https://ubuntu.com/security/notices/USN-8220-1

CVE-2023-49093

Severity
important
Lowest
Low
Medium
High
Critical

Ubuntu Security Notice USN-8220-1

Topics%20covered

Topics Covered

security advisory remote code execution Ubuntu important malicious website htmlunit

Package Information

Get the latest News and Insights

Get the latest Linux and open source security news straight to your inbox.

Your message here