furlongm openvpn-monitor allows CSRF to disconnect an arbitrary client · CVE-2021-31604 · GitHub Advisory Database · GitHub

furlongm openvpn-monitor allows CSRF to disconnect an arbitrary client

Moderate severity GitHub Reviewed Published May 24, 2022 to the GitHub Advisory Database • Updated Mar 3, 2024

Package

openvpn-monitor (pip)

Affected versions

<= 1.1.3

Patched versions

None

Description

furlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an arbitrary client.

References

Published by the National Vulnerability Database

Sep 27, 2021

Published to the GitHub Advisory Database May 24, 2022

Reviewed Feb 23, 2024

Last updated Mar 3, 2024