CVE-2023-7245

The nodejs framework in OpenVPN Connect versions 3.0 through 3.4.3 (Windows) and 3.0 through 3.4.7 (macOS) is vulnerable to arbitrary code execution. The root cause is a misconfiguration that fails to neutralize instructions in dynamically executed code, allowing a local user to execute code with...