OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script or HTML via the web login page URL.
References
Link | Resource |
---|---|
https://openvpn.net/vpn-server-resources/release-notes/#openvpn-access-server-2-9-5 | Release Notes Vendor Advisory |
Configurations
History
29 Sep 2021, 20:21
Type | Values Removed | Values Added |
---|---|---|
CPE | cpe:2.3:a:openvpn:openvpn_access_server:*:*:*:*:*:*:*:* | |
CVSS |
v2 : v3 : |
v2 : 4.3
v3 : 6.1 |
CWE | CWE-79 | |
References | (MISC) https://openvpn.net/vpn-server-resources/release-notes/#openvpn-access-server-2-9-5 - Release Notes, Vendor Advisory |
23 Sep 2021, 15:15
Type | Values Removed | Values Added |
---|---|---|
New CVE |
Information
Published : 2021-09-23 15:15
Updated : 2024-02-04 22:08
NVD link : CVE-2021-3824
Mitre link : CVE-2021-3824
CVE.ORG link : CVE-2021-3824
JSON object : View
Products Affected
openvpn
- openvpn_access_server