Vulnerabilities

TI-2021-18590 CVE-2021-42081 · GHSA-7g9g-whvg-fhcj

Authenticated Remote Command Execution vulnerability in OSNEXUS QuantaStor before 6.0.0.355

MEDIUM 44

An authenticated administrator is allowed to remotely execute arbitrary shell commands via the API.

CVSS 3.1CRITICAL 9.1 Network High privileges No interaction EPSS 0.0123 Published 2023-07-10 Fixed in 6.0.0.355 CWE-78

TI-2021-18588 CVE-2021-42079 · GHSA-4v64-w7v7-ch7f

LOW 29

An authenticated administrator is able to prepare an alert that is able to execute an SSRF attack.

CVSS 3.1MEDIUM 6.2 Network High privileges User interaction EPSS 0.00694 Published 2023-07-10 Fixed in 6.0.0.355 CWE-918

TI-2021-18589 CVE-2021-42080 · GHSA-wf5c-q6vq-584r

LOW 34

An attacker is able to launch a Reflected XSS attack using a crafted URL.

CVSS 3.1HIGH 7.4 Network No auth User interaction EPSS 0.00695 Published 2023-07-10 Fixed in 6.0.0.355 CWE-79

TI-2021-18591 CVE-2021-42082 · GHSA-3x7w-vvg2-w6r8

LOW 35

Local users are able to execute scripts under root privileges.

CVSS 3.1HIGH 7.8 Local Low privileges No interaction EPSS 0.00185 Published 2023-07-10 Fixed in 6.0.0.355 CWE-269

TI-2021-18592 CVE-2021-42083 · GHSA-9c8q-55w7-h67h

LOW 38

An authenticated attacker is able to create alerts that trigger a stored XSS attack.

CVSS 3.1HIGH 8.7 Network Low privileges User interaction EPSS 0.00547 Published 2023-07-10 Fixed in 6.0.0.355 CWE-79