medium5.9
CVE-2023-37360
pacparser_find_proxy in Pacparser before 1.4.2 allows JavaScript injection, and possibly privilege escalation, when the attacker controls the URL (which may be…
Impact
pacparser_find_proxy in Pacparser before 1.4.2 allows JavaScript injection, and possibly privilege escalation, when the attacker controls the URL (which may be realistic within enterprise security products).
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Pacparser Project | Pacparser | before 1.4.2 |