CVE-2023-33965: Txthinking Brook

High severity, CVSS 8.8. EPSS: 1.6% chance of exploitation in the next 30 days.

Brook is a cross-platform programmable network tool. The `tproxy` server is vulnerable to a drive-by command injection. An attacker may fool a victim into visiting a malicious web page which will trigger requests to the local `tproxy` service leading to remote code execution. A patch is available in version 20230606.

Affected products

• Txthinking Brook: before 20230606 (fixed in 20230606)

Published 2023-06-01. Last modified 2026-06-17.