high7.5
CVE-2025-3110
OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HTTP request smuggli…
Impact
OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HTTP request smuggling when deployed behind a reverse proxy
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Openvpn | Openvpn Access Server | from 2.7.2 through 3.1.0 |