CVE-2023-39015

CriticalCVSS 9.8

Published: 28/07/2023(UTC)Updated: 17/06/2026(UTC)Translated: 18/06/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.75%

50th percentile - higher than 50% of all known CVEs

Summary

Versions of webmagic-extension v0.9.0 and below were discovered to contain a code injection vulnerability via the component us.codecraft.webmagic.downloader.PhantomJSDownloader.

Risk Assessment

This vulnerability may allow attackers to inject malicious code, potentially leading to unauthorized access or data loss.

Recommendation

It is recommended to upgrade to the latest version of webmagic-extension to mitigate this vulnerability.

Original NVD description (English source)

webmagic-extension v0.9.0 and below was discovered to contain a code injection vulnerability via the component us.codecraft.webmagic.downloader.PhantomJSDownloader.