CVE-2023-7224 - AskarLabs CVE Database

CVE-2023-7224

Vendor Openvpn

Product OpenVPN Connect

Weakness CWE-95 · Eval injection

Published January 8, 2024

Last update September 4, 2024

View on NVD All CVEs

CVSS base score

—

What the vulnerability does

01Description

OpenVPN Connect version 3.0 through 3.4.6 on macOS allows local users to execute code in external third party libraries using the DYLD_INSERT_LIBRARIES environment variable

Key dates

02Disclosure timeline

January 8, 2024 CVE published

September 4, 2024 Record updated

External resources

03References

NVD — National Vulnerability Database https://nvd.nist.gov/vuln/detail/CVE-2023-7224 CWE — Common Weakness Enumeration https://cwe.mitre.org/data/definitions/95.html

Related vulnerabilities

04Related CVE

CVE-2023-29212 xwiki.platform:xwiki-platform-panels-ui Eval Injection vulnerability CVE-2026-22666 Dolibarr ERP/CRM < 23.0.2 Authenticated RCE via dol_eval_standard() CVE-2024-41148 Unsafe use of eval() method in rostopic hz tool CVE-2026-48962 IO::Compress versions before 2.220 for Perl can execute arbitrary code in File::GlobMapper via an attacker-controlled output glob CVE-2023-30537 org.xwiki.platform:xwiki-platform-flamingo-theme-ui vulnerable to privilege escalation