tocsin

CVE-2023-37360

1 advisory.

PyPI/pacparser CVE-2023-37360: unknown, EPSS 0.36%

pacparser_find_proxy in Pacparser before 1.4.2 allows JavaScript injection, and possibly privilege escalation, when the attacker controls the URL (which may be realistic within enterprise security pro

Action: Upgrade pacparser to 1.4.2 or later.

pip install pacparser==1.4.2

Affected

introducedfixedlast affected
01.4.2-

Fixed versions

1.4.2

Sources

CVE-2023-37360 · published · modified · JSON