https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Mon, 05 Oct 2026 04:09:09 +0000 https://cve.radiocsirt.org/vuln/cve-2021-42083 <p><strong>Affected:</strong> OSNEXUS QuantaStor</p> <p>An authenticated attacker is able to create alerts that trigger a stored XSS attack.</p> <p>POC</p> <p>* go to the alert manager</p> <p>* open the ITSM tab * add a webhook with the URL/service token value</p> <p>&#39; -h &amp;&amp; id | tee /tmp/ttttttddddssss #&#39; (whitespaces are tab characters)</p> <p>* click add</p> <p>* click apply</p> <p>* create a test alert</p> <p>* The test alert will run the command</p> <p>“id | tee /tmp/ttttttddddssss” as root.</p> <p>* after the test alert inspect</p> <p>/tmp/ttttttddddssss it&#39;ll contain the ids of the root user.</p> <p><strong>Affected:</strong> OSNEXUS QuantaStor</p> <p>An authenticated attacker is able to create alerts that trigger a stored XSS attack.</p> <p>POC</p> <p>* go to the alert manager</p> <p>* open the ITSM tab * add a webhook with the URL/service token value</p> <p>&#39; -h &amp;&amp; id | tee /tmp/ttttttddddssss #&#39; (whitespaces are tab characters)</p> <p>* click add</p> <p>* click apply</p> <p>* create a test alert</p> <p>* The test alert will run the command</p> <p>“id | tee /tmp/ttttttddddssss” as root.</p> <p>* after the test alert inspect</p> <p>/tmp/ttttttddddssss it&#39;ll contain the ids of the root user.</p> https://cve.radiocsirt.org/vuln/cve-2021-42083