Skip to content
OpenAdvisories

Vendor

Osnexus

8 known vulnerabilities.

Products

QuantaStor 8
All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • Medium 6.2
    CVE-2021-42079

    SSRF vulnerability in OSNEXUS QuantaStor before 6.0.0.355

    An authenticated administrator is able to prepare an alert that is able to execute an SSRF attack. This is exclusively with POST requests. POC Step 1: Prepare the SSRF with a request like this: GET /qstorapi/alertConfigSet?senderEmailAddress=a&smtpServerIpAdd…

    Osnexus QuantaStor