/
DirectorySecurity Advisories
Sign In
Security Advisories

CGA-rw9v-mpx8-r6c6

Published

Last updated

https://images.chainguard.dev/security/CGA-rw9v-mpx8-r6c6
Package

hadoop-fips-3.3.6

Repository

Chainguard

Latest Update
Fix not planned
Aliases
  • CVE-2020-5529
  • GHSA-5mh9-r3rr-9597

Severity

Unknown

Summary

Code execution vulnerability in HtmlUnit

Description

HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. HtmlUnit initializes Rhino engine improperly, hence a malicious JavScript code can execute arbitrary Java code on the application. Moreover, when embedded in Android application, Android-specific initialization of Rhino engine is done in an improper way, hence a malicious JavaScript code can execute arbitrary Java code on the application.

References

Updates


Safe Source for Open Sourceâ„¢
Media KitContact Us
© 2025 Chainguard. All Rights Reserved.
Private PolicyTerms of Use

Products

Chainguard ContainersChainguard LibrariesChainguard VMs