Vulnerabilities in openvpn-monitor

Emanuel Duss and Sylvain Heiniger identified multiple vulnerabilities in the OpenVPN status monitor software openvpn-monitor.

 

Details to these advisories:

CSNC-2021-009 / Authorization Bypass

CSNC-2021-010 / OpenVPN Management Socket Command Injection

CSNC-2021-011 / Cross-Site Request Forgery (CSRF)

Back