furlongm openvpn-monitor allows CSRF to disconnect an arbitrary client

概要

参考情報

• nvd.nist.gov/vuln/detail/CVE-2021-31604 · ADVISORY
• furlongm/openvpn-monitor · PACKAGE
• furlongm/openvpn-monitor release · WEB
• pypa/advisory-database · WEB
• packetstormsecurity.com/files/164281/OpenVPN-Monitor-1.1.3-Cross-Site-Request-Forgery.html · WEB
• GitHub Advisory GHSA-vw35-c8hf-fwmq · ADVISORY

openvpn-monitor のその他の脆弱性

• CVE-2021-31606高 7.5furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients.
• CVE-2021-31605高 7.5furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the serv…