CVE-2023-33965 — Brook's tproxy server is vulnerable to a drive-by command injection.
Brook is a cross-platform programmable network tool. The `tproxy` server is vulnerable to a drive-by command injection. An attacker may fool a victim into visiting a malicious w…
Published: 2023-06-01 · CVSS: 9.7 · CVSS 3.1
Brook is a cross-platform programmable network tool. The `tproxy` server is vulnerable to a drive-by command injection. An attacker may fool a victim into visiting a malicious web page which will trigger requests to the local `tproxy` service leading to remote code execution. A patch is available in version 20230606.
Source: CVE Program · Revision 8b16575c39f1e1810c5e863010da073d2d3285e7