An authenticated attacker is able to create alerts that trigger a stored XSS attack.
References
| Link | Resource |
|---|---|
| https://csirt.divd.nl/CVE-2021-42083 | Third Party Advisory |
| https://www.wbsec.nl/osnexus | Third Party Advisory |
| https://www.osnexus.com/products/software-defined-storage | Product |
| https://csirt.divd.nl/DIVD-2021-00020/ |
Configurations
Configuration 1 (hide)
| AND |
|
History
16 Oct 2024, 12:15
| Type | Values Removed | Values Added |
|---|---|---|
| References |
|
|
02 Jan 2024, 19:15
| Type | Values Removed | Values Added |
|---|---|---|
| Summary | An authenticated attacker is able to create alerts that trigger a stored XSS attack. |
13 Jul 2023, 23:11
| Type | Values Removed | Values Added |
|---|---|---|
| References | (MISC) https://csirt.divd.nl/CVE-2021-42083 - Third Party Advisory | |
| References | (MISC) https://www.divd.nl/DIVD-2021-00020 - Broken Link | |
| References | (MISC) https://www.osnexus.com/products/software-defined-storage - Product | |
| References | (MISC) https://www.wbsec.nl/osnexus - Third Party Advisory | |
| CVSS |
v2 : v3 : |
v2 : unknown
v3 : 5.4 |
| First Time |
Osnexus quantastor
Linux Osnexus Linux linux Kernel Microsoft Microsoft windows |
|
| CPE | cpe:2.3:o:microsoft:windows:-:*:*:*:*:*:*:* cpe:2.3:o:linux:linux_kernel:-:*:*:*:*:*:*:* cpe:2.3:a:osnexus:quantastor:*:*:*:*:*:*:*:* |
|
| CWE | CWE-79 |
10 Jul 2023, 16:27
| Type | Values Removed | Values Added |
|---|---|---|
| New CVE |
Information
Published : 2023-07-10 16:15
Updated : 2024-10-16 12:15
NVD link : CVE-2021-42083
Mitre link : CVE-2021-42083
JSON object : View
Products Affected
linux
- linux_kernel
osnexus
- quantastor
microsoft
- windows
CWE
CWE-79
Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting')