Vulnerability Details CVE-2021-31604
furlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an arbitrary client.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 30.4%
CVSS Severity
CVSS v3 Score 6.5
CVSS v2 Score 4.3
References
- http://packetstormsecurity.com/files/164281/OpenVPN-Monitor-1.1.3-Cross-Site-Request-Forgery.html
- https://github.com/furlongm/openvpn-monitor/releases
- http://packetstormsecurity.com/files/164281/OpenVPN-Monitor-1.1.3-Cross-Site-Request-Forgery.html
- https://github.com/furlongm/openvpn-monitor/releases
Products affected by CVE-2021-31604
-
cpe:2.3:a:openvpn-monitor_project:openvpn-monitor:*