Description
webmagic-extension v0.9.0 and below was discovered to contain a code injection vulnerability via the component us.codecraft.webmagic.downloader.PhantomJSDownloader.
Remediation
References
https://github.com/code4craft/webmagic/issues/1122
Related Vulnerabilities
CVE-2023-39013 Vulnerability in maven package no.priv.garshol.duke:duke
CVE-2022-32114 Vulnerability in npm package @strapi/strapi
CVE-2023-34467 Vulnerability in maven package org.xwiki.platform:xwiki-platform-livetable-ui
CVE-2022-25973 Vulnerability in npm package mc-kill-port
CVE-2018-6561 Vulnerability in maven package org.webjars.bower:dijit