Question 1

What is CVE-2025-3110 — CVE-2025-3110?

Accepted Answer

OpenVPN Access Server 2.7.2 through 3.1.0 accepts bare line-feed sequences inside HTTP header values, allowing remote attackers to perform HTTP request smuggling when deployed behind a reverse proxy

Question 2

What is the authoritative source for CVE-2025-3110?

Accepted Answer

CVE-2025-3110 (CVE-2025-3110) is catalogued in NVD + CISA KEV + FIRST EPSS and curated for EU compliance use cases by SQUR.

CVE-2025-3110CVE-2025-3110

Description

Scoring