Xiaoyunjie Openvpn-Cms-Flask vulnerabilities

CVE-2025-6775 [CRITICAL] CWE-74 CVE-2025-6775: A vulnerability classified as critical has been found in xiaoyunjie openvpn-cms-flask up to 1.2.7. T A vulnerability classified as critical has been found in xiaoyunjie openvpn-cms-flask up to 1.2.7. This affects the function create_user of the file /app/api/v1/openvpn.py of the component User Creation Endpoint. The manipulation of the argument Username leads to command injection. It is possible to initiate the attack remotely. The exploit has been

CVE-2025-6776 [CRITICAL] CWE-22 CVE-2025-6776: A vulnerability classified as critical was found in xiaoyunjie openvpn-cms-flask up to 1.2.7. This v A vulnerability classified as critical was found in xiaoyunjie openvpn-cms-flask up to 1.2.7. This vulnerability affects the function Upload of the file app/plugins/oss/app/controller.py of the component File Upload. The manipulation of the argument image leads to path traversal. The attack can be initiated remotely. The exploit has been disclosed to