CVE-2021-31604: CSRF
Published Sep 27, 2021
·Updated
furlongm openvpn-monitor through 1.1.3 allows CSRF to disconnect an arbitrary client.
Affected Software
2 affected components
pip/openvpn-monitor<=1.1.3
Openvpn-monitor Project Openvpn-monitor<=1.1.3
Event History
Sep 27, 2021
CVE Published
via MITRE·05:32 AM
Data Sourced
via MITRE·05:32 AM
Description
May 24, 2022
Advisory Published
via GitHub·07:15 PM
Frequently Asked Questions
1
What is the severity of CVE-2021-31604?
CVE-2021-31604 has a medium severity level due to its ability to allow CSRF attacks on the application.
2
How do I fix CVE-2021-31604?
To fix CVE-2021-31604, upgrade to openvpn-monitor version 1.1.4 or later immediately.
3
What type of attack does CVE-2021-31604 allow?
CVE-2021-31604 allows Cross-Site Request Forgery (CSRF) attacks, enabling unauthorized disconnection of arbitrary clients.
4
Which versions of openvpn-monitor are affected by CVE-2021-31604?
CVE-2021-31604 affects all versions of openvpn-monitor up to and including version 1.1.3.
5
Is CVE-2021-31604 specific to a certain platform?
CVE-2021-31604 is related to the openvpn-monitor application and can affect any platform using the affected software version.