| Package | Affected versions | Patched versions |
|---|---|---|
| openvpn access server | ≥ 2.7.2, ≤ 3.1.0 |
OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HTTP request smuggling when deployed behind a reverse proxy
Running one of these products? Scan your site to see whether it exposes a vulnerable version.
Scan my site free