CVE-2023-37360

Name of the Vulnerable Software and Affected Versions Pacparser versions prior to 1.4.2

Description The issue allows JavaScript injection, and possibly privilege escalation, when the attacker controls the URL, which may be realistic within enterprise security products.

Recommendations For versions prior to 1.4.2, update to version 1.4.2 or later to resolve the issue. As a temporary workaround, consider restricting access to the pacparser find proxy function until a patch is available.