Lucene search

K
prionPRIOn knowledge basePRION:CVE-2023-7245
HistoryFeb 20, 2024 - 11:15 a.m.

Code injection

2024-02-2011:15:00
PRIOn knowledge base
www.prio-n.com
4
openvpn
connect
code injection
nodejs
framework
vulnerability

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

The nodejs framework in OpenVPN Connect 3.0 through 3.4.3 (Windows)/3.4.7 (macOS) was not properly configured, which allows a local user to execute arbitrary code within the nodejs process context via the ELECTRON_RUN_AS_NODE environment variable

7.8 High

AI Score

Confidence

High

0.0004 Low

EPSS

Percentile

9.0%

Related for PRION:CVE-2023-7245