Vulnerabilities > CVE-2021-42079 - Server-Side Request Forgery (SSRF) vulnerability in Osnexus Quantastor 4.3.0
Attack vector
NETWORK Attack complexity
LOW Privileges required
HIGH Confidentiality impact
HIGH Integrity impact
NONE Availability impact
NONE Summary
An authenticated administrator is able to prepare an alert that is able to execute an SSRF attack. This is exclusively with POST requests.
Vulnerable Configurations
Part | Description | Count |
---|---|---|
Application | 1 |