CVE-2023-37360

Summary

pacparser_find_proxy in Pacparser before 1.4.2 allows JavaScript injection, and possibly privilege escalation, when the attacker controls the URL (which may be realistic within enterprise security products).

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/manugarg/pacparser/security/advisories/GHSA-62q6-v997-f7v9

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: no
  • Technical Impact: partial

References

• https://github.com/manugarg/pacparser/security/advisories/GHSA-62q6-v997-f7v9

• ←Previous
• Next→