What is GHSA-4258-vcjw-wwxx?

GHSA-4258-vcjw-wwxx is a security advisory published by GitHub Security Advisories with High severity. furlongm openvpn-monitor command injection

Which CVE IDs does GHSA-4258-vcjw-wwxx cover?

GHSA-4258-vcjw-wwxx covers the following CVE IDs: CVE-2021-31605. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-4258-vcjw-wwxx?

GHSA-4258-vcjw-wwxx has a CVSS v3 base score of 7.5, published by GitHub Security Advisories.

Which products are affected by GHSA-4258-vcjw-wwxx?

GHSA-4258-vcjw-wwxx affects 1 product, including: pip/openvpn-monitor:\u003c= 1.1.3.

GHSA-4258-vcjw-wwxxHighCVSS 7.5

furlongm openvpn-monitor command injection

Vendor

GitHub Security Advisories

Published

May 24, 2022

Last Modified

October 8, 2024

🔗 CVE IDs covered (1)

CVE-2021-31605 →

📋 Description

furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the server via signal SIGTERM.

🎯 Affected products1

pip/openvpn-monitor:<= 1.1.3

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2021-31605
https://github.com/furlongm/openvpn-monitor/releases
http://packetstormsecurity.com/files/164278/OpenVPN-Monitor-1.1.3-Command-Injection.html
https://github.com/pypa/advisory-database/tree/main/vulns/openvpn-monitor/PYSEC-2021-353.yaml
https://github.com/advisories/GHSA-4258-vcjw-wwxx