CVE-2021-42081 Authenticated Remote Command Execution vulnerability in OSNEXUS QuantaStor before 6.0.0.355

An authenticated administrator is allowed to remotely execute arbitrary shell commands via the API. POC...

CVE-2021-42081

Summary: CVE-2021-42081 affects OSNEXUS QuantaStor prior to 6.0.0.355, where an authenticated administrator can remotely execute arbitrary shell commands via the API. The issue arises from a command-injection style vulnerability exposed in the storage system API, enabling control of the host when...