CVE Catalog
CVE-2023-37360
MediumCVSS 5.9Exploitation Probability (EPSS)
Low risk0.33%
25th percentile - higher than 25% of all known CVEs
Summary
In pacparser before version 1.4.2, there is a vulnerability in the pacparser_find_proxy function that allows JavaScript injection, potentially leading to privilege escalation if the attacker controls the URL.
Risk Assessment
This vulnerability could be exploited in enterprise environments, posing a risk to the security of applications and organizational data.
Recommendation
It is recommended to update pacparser to version 1.4.2 or later to mitigate the risks associated with this vulnerability.
Original NVD description (English source)
pacparser_find_proxy in Pacparser before 1.4.2 allows JavaScript injection, and possibly privilege escalation, when the attacker controls the URL (which may be realistic within enterprise security products).