furlongm openvpn-monitor command injection
furlongm openvpn-monitor through 1.1.3 allows %0a command injection via the OpenVPN management interface socket. This can shut down the server via signal SIGTERM.
Advisories for Pypi/Openvpn-Monitor package
2022
furlongm openvpn-monitor allows CSRF to disconnect an arbitrary client
furlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an arbitrary client.
furlongm openvpn-monitor allows Authorization Bypass to disconnect arbitrary clients
furlongm openvpn-monitor through 1.1.3 allows Authorization Bypass to disconnect arbitrary clients.