Medium severity4.7NVD Advisory· Published Mar 10, 2022· Updated Jun 17, 2026

CVE-2021-42856

Description

It was discovered that the /DsaDataTest endpoint is susceptible to Cross-site scripting (XSS) attack. It was noted that the Metric parameter does not have any input checks on the user input that allows an attacker to craft its own malicious payload to trigger a XSS vulnerability.

Affected products

Aternity/Steelcentral Appinternals Dynamic Sampling Agentv5
Range: 10.x

Patches

Vulnerability mechanics

References

aternity.force.com/customersuccess/s/article/Reflected-Cross-site-Scripting-at-DsaDataTest-CVE-2021-42856nvdThird Party Advisory

News mentions

No linked articles in our index yet.

cvss	0.306
epss	0.000
exploit	0.000
kev	0.000
patch	0.000
ransomware	0.000