CVE-2020-5529: Apache Camel

High severity, CVSS 8.1. EPSS: 4.7% chance of exploitation in the next 30 days.

HtmlUnit prior to 2.37.0 contains code execution vulnerabilities. HtmlUnit initializes Rhino engine improperly, hence a malicious JavScript code can execute arbitrary Java code on the application. Moreover, when embedded in Android application, Android-specific initialization of Rhino engine is done in an improper way, hence a malicious JavaScript code can execute arbitrary Java code on the application.

Affected products

• Apache Camel: affected versions not specified
• Canonical Ubuntu Linux: version 16.04 only
• Debian Debian Linux: version 9.0 only
• Htmlunit Htmlunit: before 2.37.0 (fixed in 2.37.0)

Published 2020-02-11. Last modified 2026-06-17.