CVE-2021-42080

Description

An attacker is able to launch a Reflected XSS attack using a crafted URL. POC: Visit the following URL https://:8153/qstorapi/echo?inputMessage=

Affected Platforms

Weakness Type

CWE-79, CWE-79

References

• https://csirt.divd.nl/CVE-2021-42080
• https://csirt.divd.nl/DIVD-2021-00020/
• https://www.osnexus.com/products/software-defined-storage
• https://www.wbsec.nl/osnexus
• https://csirt.divd.nl/CVE-2021-42080
• https://www.divd.nl/DIVD-2021-00020