CVE-2023-33965
CriticalCVSS 9.6Exploitation Probability (EPSS)
Elevated risk72th percentile - higher than 72% of all known CVEs
Summary
Brook is a cross-platform network tool that includes a vulnerable `tproxy` server susceptible to drive-by command injection. An attacker may trick a victim into visiting a malicious webpage, leading to remote code execution.
Risk Assessment
This vulnerability may result in remote code execution, posing a significant security risk to systems using the `tproxy` server.
Recommendation
It is recommended to upgrade to version 20230606, which includes patches addressing this vulnerability.
Original NVD description (English source)
Brook is a cross-platform programmable network tool. The `tproxy` server is vulnerable to a drive-by command injection. An attacker may fool a victim into visiting a malicious web page which will trigger requests to the local `tproxy` service leading to remote code execution. A patch is available in version 20230606.