CVE-2021-3824

MEDIUM CVSS: 6.1 Published: 2021-09-23 Modified: 2026-06-17

Description

OpenVPN Access Server 2.9.0 through 2.9.4 allow remote attackers to inject arbitrary web script or HTML via the web login page URL.

Affected Platforms

Openvpn Openvpn Access Server

Weakness Type

CWE-84, CWE-79

References