| Package | Affected versions | Patched versions |
|---|---|---|
| pacparser | < 1.4.2 | 1.4.2 |
| pacparser | < 1.4.2 | 1.4.2 |
pacparser_find_proxy in Pacparser before 1.4.2 allows JavaScript injection, and possibly privilege escalation, when the attacker controls the URL (which may be realistic within enterprise security products).
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free