Vulnerability Details CVE-2021-42079
An authenticated administrator is able to prepare an alert that is able to execute an SSRF attack. This is exclusively with POST requests.
Exploit prediction scoring system (EPSS) score
EPSS Score 0.001
EPSS Ranking 16.1%
CVSS Severity
CVSS v3 Score 6.2
References
- https://cisrt.divd.nl/DIVD-2021-00020/
- https://csirt.divd.nl/CVE-2021-42079
- https://www.osnexus.com/products/software-defined-storage
- https://www.wbsec.nl/osnexus
- https://csirt.divd.nl/CVE-2021-42079
- https://www.divd.nl/DIVD-2021-00020
- https://www.osnexus.com/products/software-defined-storage
- https://www.wbsec.nl/osnexus
Products affected by CVE-2021-42079
-
cpe:2.3:a:osnexus:quantastor:4.3.0