📦 Quantastor

by Osnexus

🔍 What is Quantastor?

Description coming soon...

🛡️ Security Overview

Click on a severity to filter vulnerabilities

⚠️ Known Vulnerabilities

CVE-2021-42081

CRITICAL CVSS 9.1 Jul 10, 2023

This vulnerability allows authenticated administrators to execute arbitrary shell commands through the API in OSNexus QuantaStor storage systems. Attackers with admin credentials can achieve remote co...

CVE-2021-4406

CRITICAL CVSS 9.1 Jul 10, 2023

This vulnerability allows authenticated attackers to create alerts that trigger stored cross-site scripting (XSS) attacks, which can lead to remote command execution as root. It affects OSNexus Quanta...

CVE-2021-42080

HIGH CVSS 7.4 Jul 10, 2023

This vulnerability allows attackers to execute reflected cross-site scripting (XSS) attacks via specially crafted URLs in OSnexus QuantaStor storage systems. Attackers can inject malicious scripts tha...

CVE-2021-42083

HIGH CVSS 8.7 Jul 10, 2023

This vulnerability in OSNexus QuantaStor allows authenticated attackers to create alerts with malicious webhook URLs that execute arbitrary commands as root when triggered. The stored XSS leads to rem...