Vulnerabilities > CVE-2021-23406 - Unspecified vulnerability in Pac-Resolver Project Pac-Resolver

CVSS 7.5 - HIGH

Attack vector

NETWORK

Attack complexity

LOW

Privileges required

NONE

Confidentiality impact

PARTIAL

Integrity impact

PARTIAL

Availability impact

PARTIAL

network

low complexity

pac-resolver-project

NVD

Published: 2021-08-24

Updated: 2021-08-30

Summary

This affects the package pac-resolver before 5.0.0. This can occur when used with untrusted input, due to unsafe PAC file handling. **NOTE:** The fix for this vulnerability is applied in the node-degenerator library, a dependency written by the same maintainer.

Vulnerable Configurations

Part	Description	Count
Application	Pac-Resolver_Project PAC Resolver Project PAC Resolver 0.0.1 PAC Resolver Project PAC Resolver 0.0.2 PAC Resolver Project PAC Resolver 1.0.0 PAC Resolver Project PAC Resolver 1.1.0 PAC Resolver Project PAC Resolver 1.2.0 PAC Resolver Project PAC Resolver 1.2.1 PAC Resolver Project PAC Resolver 1.2.2 PAC Resolver Project PAC Resolver 1.2.3 PAC Resolver Project PAC Resolver 1.2.4 PAC Resolver Project PAC Resolver 1.2.5 PAC Resolver Project PAC Resolver 1.2.6 PAC Resolver Project PAC Resolver 1.3.0 PAC Resolver Project PAC Resolver 2.0.0 PAC Resolver Project PAC Resolver 3.0.0 PAC Resolver Project PAC Resolver 4.0.0 PAC Resolver Project PAC Resolver 4.1.0 PAC Resolver Project PAC Resolver 4.1.1 PAC Resolver Project PAC Resolver 4.2.0	18

Vulnerabilities > CVE-2021-23406 - Unspecified vulnerability in Pac-Resolver Project Pac-Resolver

Summary

Vulnerable Configurations

Related news

References