The vulnerability of the SAML Assertion Consumer Service (ACS) server of OpenVPN Access allows a perpetrator to execute arbitrary HTML code or web scripts.

The vulnerability of the SAML Assertion Consumer Service ACS of the OpenVPN Access server is related to the lack of security measures taken for the structure of the web page during the processing of the RelayState parameter. Exploiting this vulnerability allows a malicious actor to execute...