medium6.1
CVE-2021-3824
OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script or HTML via the web login page URL.
Impact
OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script or HTML via the web login page URL.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openvpn | Openvpn Access Server | from 2.9.0 through 2.9.4 |