Description
webmagic-extension v0.9.0 and below was discovered to contain a code injection vulnerability via the component us.codecraft.webmagic.downloader.PhantomJSDownloader.
Remediation
References
https://github.com/code4craft/webmagic/issues/1122
Related Vulnerabilities
CVE-2013-7285 Vulnerability in maven package com.thoughtworks.xstream:xstream
CVE-2022-21126 Vulnerability in maven package com.github.samtools:htsjdk
CVE-2023-29522 Vulnerability in maven package org.xwiki.platform:xwiki-platform-xclass-ui
CVE-2018-5653 Vulnerability in maven package org.apache.cayenne.modeler:cayenne-modeler
CVE-2016-9177 Vulnerability in maven package com.sparkjava:spark-core