Vulnerabilities

TI-2021-11704 CVE-2021-31605 · GHSA-4258-vcjw-wwxx

furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN…

LOW 39

furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.03405 Published 2021-09-27 No fix listed CWE-78

TI-2021-11703 CVE-2021-31604 · GHSA-vw35-c8hf-fwmq

LOW 30

furlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an arbitrary client.

CVSS 3.1MEDIUM 6.5 Network No auth User interaction EPSS 0.00683 Published 2021-09-27 No fix listed CWE-352

TI-2021-11705 CVE-2021-31606 · GHSA-5w5c-3g26-8mmc

LOW 38

furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.02599 Published 2021-09-27 No fix listed CWE-287