critical9.8
CVE-2023-39015
Code injection in webmagic-core
Impact
webmagic-extension v0.9.0 and below was discovered to contain a code injection vulnerability via the component us.codecraft.webmagic.downloader.PhantomJSDownloader.
Affected packages
| Ecosystem | Package | Affected | Fixed in |
|---|---|---|---|
| maven | us.codecraft:webmagic-core | <= 0.9.0 | none recorded |
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Code4craft | Webmagic | through 0.9.0 |