Description
OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script or HTML via the web login page URL.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| — | OpenVPN Access Server | 2.9.0 through 2.9.4 | — |
Unscored
CVE-2021-3824
EUVD-2021-27073GHSA-hqrg-vp62-hmj7
OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script or HTML via the web login page URL.
Published Sep 23, 2021 · Updated Aug 3, 2024 · Assigned by OpenVPN