CVE-2021-42079

🗓️ 10 Jul 2023 06:29:48Reported by DIVDType

cve🔗 web.nvd.nist.gov👁 28 Views🌐 WEB

An admin can create alert for SSRF attack with POST request

Reporter	Title	Published	Views	Family All 10
Circl	CVE-2021-42079	9 Jan 202508:17	–	circl
CNNVD	OSNEXUS QuantaStor 代码问题漏洞	10 Jul 202300:00	–	cnnvd
Cvelist	CVE-2021-42079 SSRF vulnerability in OSNEXUS QuantaStor before 6.0.0.355	10 Jul 202306:29	–	cvelist
EUVD	EUVD-2021-29065	3 Oct 202520:07	–	euvd
NVD	CVE-2021-42079	10 Jul 202316:15	–	nvd
OSV	CVE-2021-42079	10 Jul 202316:15	–	osv
Prion	Server side request forgery (ssrf)	10 Jul 202316:15	–	prion
Positive Technologies	PT-2023-12394 · Osnexus · Quantastor	10 Jul 202300:00	–	ptsecurity
RedhatCVE	CVE-2021-42079	22 May 202518:48	–	redhatcve
Vulnrichment	CVE-2021-42079 SSRF vulnerability in OSNEXUS QuantaStor before 6.0.0.355	10 Jul 202306:29	–	vulnrichment

NVD

Node

osnexus quantastorRange<6.0.0.355

[
  {
    "collectionURL": "https://www.osnexus.com/downloads",
    "defaultStatus": "unknown",
    "platforms": [
      "Windows",
      "Linux"
    ],
    "product": "QuantaStor",
    "vendor": "OSNEXUS",
    "versions": [
      {
        "lessThan": "6.0.0.355",
        "status": "affected",
        "version": "0",
        "versionType": "semver"
      }
    ]
  }
]

Source	Link
csirt	www.csirt.divd.nl/CVE-2021-42079
wbsec	www.wbsec.nl/osnexus
osnexus	www.osnexus.com/products/software-defined-storage
cisrt	www.cisrt.divd.nl/DIVD-2021-00020/
divd	www.divd.nl/DIVD-2021-00020

Parameter	Position	Path	Description	CWE
slackWebhookUrl	query param	qstorapi/alertConfigSet	SSRF via webhook URL parameters in alert configuration endpoint	CWE-918
mattermostWebhookUrl	query param	qstorapi/alertConfigSet	SSRF via webhook URL parameters in alert configuration endpoint	CWE-918

22 Sep 2025 07:15Current

5.3Medium risk

Vulners AI Score5.3

CVSS 3.14.9 - 6.2

EPSS0.00067

SSVC

CWE-918