← Back

Eduvpn

eduvpn

1 CVE • 1 product

Products (1)

Click to collapse
Toggle
Vpn User Portal
vpn-user-portal
1 CVE

CVEs (1)

CVE
VENDORS
PRODUCTS
UPDATED
PUBLISHED
CVSS
CVE-2021-41583
1Eduvpn
1Vpn User Portal
Jun 17, 2026
Sep 24, 2021
N/A· v4
6.5 MEDIUM· v3
9.0 HIGH· v2
vpn-user-portal (aka eduVPN or Let's Connect!) before 2.3.14, as packaged for Debian 10, Debian 11, and Fedora, allows remote authenticated users to obtain OS filesystem access, because of the interaction of QR codes wit...Show more
vpn-user-portal (aka eduVPN or Let's Connect!) before 2.3.14, as packaged for Debian 10, Debian 11, and Fedora, allows remote authenticated users to obtain OS filesystem access, because of the interaction of QR codes with an exec that uses the -r option. This can be leveraged to obtain additional VPN access.Show less