GHSA-92x4-7936-ww96

Опубликовано: 08 июл. 2026

Источник: github

Github: Не прошло ревью

CVSS4: 6.9

CVSS3: 7.5

Описание

OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HTTP request smuggling when deployed behind a reverse proxy

Ссылки

EPSS

Процентиль: 17%

0.00259

Низкий

6.9 Medium

CVSS4

7.5 High

CVSS3

CVE ID

CVE-2025-3110

Дефекты

CWE-444

Связанные уязвимости

CVE-2025-3110

CVSS3: 5.3

redhat

около 2 месяцев назад

OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HTTP request smuggling when deployed behind a reverse proxy

CVE-2025-3110

CVSS3: 7.5

nvd

около 2 месяцев назад

OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HTTP request smuggling when deployed behind a reverse proxy

EPSS

Процентиль: 17%

0.00259

Низкий

6.9 Medium

CVSS4

7.5 High

CVSS3

CVE ID

CVE-2025-3110

Дефекты

CWE-444