CVE-2023-2798: 
Java vulnerability analysis and mitigation

HtmlUnit versions before 2.70.0 contain a Denial of Service (DoS) vulnerability identified as CVE-2023-2798. When HtmlUnit is used to browse untrusted webpages, an attacker can supply content that causes HtmlUnit to crash through a stack overflow, potentially leading to a denial of service attack (NVD).

The vulnerability has been assigned a CVSS v3.1 base score of 7.5 (HIGH) with the vector string CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H. The issue is related to a stack overflow condition that occurs when processing user-supplied web pages. The vulnerability has been categorized under CWE-400 (Uncontrolled Resource Consumption) by Google Inc. and CWE-787 (Out-of-bounds Write) by NIST (NVD).

The primary impact of this vulnerability is the potential for Denial of Service attacks. When exploited, the vulnerability can cause HtmlUnit to crash, making the service unavailable. This is particularly concerning in environments where HtmlUnit is processing untrusted web content (NVD).

The vulnerability has been fixed in HtmlUnit version 2.70.0 and later. Users are advised to upgrade to this version or newer to mitigate the risk. The fix involved removing recursion to address the stack overflow issue (GitHub Commit).