CVE-2023-37360

CVE-2023-37360 describes a JavaScript injection vulnerability in pacparser_find_proxy within Pacparser versions prior to 1.4.2. This flaw, rated Medium severity (CVSS 6.1), allows an attacker to inject malicious JavaScript if they can control the URL, potentially leading to privilege escalation, particularly in enterprise security product contexts. While the attack vector is network-based with low complexity, user interaction is required. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.