Mindaugas Veblauskas

1 exploit Active since Jul 2024
CVE-2024-37391 WRITEUP HIGH WRITEUP
ProtonVPN < 3.2.10 - OS Command Injection via Drive Installer Path
ProtonVPN before 3.2.10 on Windows mishandles the drive installer path, which should use this: '"' + ExpandConstant('{autopf}\Proton\Drive') + '"' in Setup/setup.iss.
CVSS 7.8