Skip to content
OpenAdvisories

Vendor

xiaoyunjie

2 known vulnerabilities.

1 result · Clear filters · Feed

  • Medium 6.3

    xiaoyunjie openvpn-cms-flask User Creation Endpoint openvpn.py create_user command injection

    A vulnerability classified as critical has been found in xiaoyunjie openvpn-cms-flask up to 1.2.7. This affects the function create_user of the file /app/api/v1/openvpn.py of the component User Creation Endpoint. The manipulation of the argument Username lead…