Vulnerabilities > CVE-2021-23406 - Unspecified vulnerability in Pac-Resolver Project Pac-Resolver

CVSS 9.8 - CRITICAL

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

HIGH

Integrity impact

HIGH

Availability impact

HIGH

network

low complexity

pac-resolver-project

critical

NVD

Published: 2021-08-24

Updated: 2021-08-30

Summary

This affects the package pac-resolver before 5.0.0. This can occur when used with untrusted input, due to unsafe PAC file handling. **NOTE:** The fix for this vulnerability is applied in the node-degenerator library, a dependency written by the same maintainer.

Vulnerable Configurations

Part	Description	Count
Application	Pac-Resolver_Project PAC Resolver Project PAC Resolver 0.0.1 PAC Resolver Project PAC Resolver 0.0.2 PAC Resolver Project PAC Resolver 1.0.0 PAC Resolver Project PAC Resolver 1.1.0 PAC Resolver Project PAC Resolver 1.2.0 PAC Resolver Project PAC Resolver 1.2.1 PAC Resolver Project PAC Resolver 1.2.2 PAC Resolver Project PAC Resolver 1.2.3 PAC Resolver Project PAC Resolver 1.2.4 PAC Resolver Project PAC Resolver 1.2.5 PAC Resolver Project PAC Resolver 1.2.6 PAC Resolver Project PAC Resolver 1.3.0 PAC Resolver Project PAC Resolver 2.0.0 PAC Resolver Project PAC Resolver 3.0.0 PAC Resolver Project PAC Resolver 4.0.0 PAC Resolver Project PAC Resolver 4.1.0 PAC Resolver Project PAC Resolver 4.1.1 PAC Resolver Project PAC Resolver 4.2.0	18

Vulnerabilities > CVE-2021-23406 - Unspecified vulnerability in Pac-Resolver Project Pac-Resolver

Summary

Vulnerable Configurations

Related news

References