Description
webmagic-extension v0.9.0 and below was discovered to contain a code injection vulnerability via the component us.codecraft.webmagic.downloader.PhantomJSDownloader.
Remediation
References
https://github.com/code4craft/webmagic/issues/1122
Related Vulnerabilities
CVE-2023-32314 Vulnerability in maven package org.webjars.npm:vm2
CVE-2023-34092 Vulnerability in maven package org.webjars.npm:vite
CVE-2017-11555 Vulnerability in maven package org.webjars.npm:node-sass
CVE-2021-23558 Vulnerability in npm package bmoor
CVE-2021-38294 Vulnerability in maven package org.apache.storm:storm-server