OSNEXUS

CVEs (1)

CVE	Vendor / Product	Sev	Risk	CVSS	EPSS	KEV	Published	Description
CVE-2021-42083	Nexus Concepts OSNEXUS	Hig	0.57	8.7	0.00		Jul 10, 2023	An authenticated attacker is able to create alerts that trigger a stored XSS attack. POC * go to the alert manager * open the ITSM tab * add a webhook with the URL/service token value ' -h && id \| tee /tmp/ttttttddddssss #' (whitespaces are tab characters) * …

CVE-2021-42083HigJul 10, 2023
Nexus Concepts
OSNEXUS
risk 0.57cvss 8.7epss 0.00
An authenticated attacker is able to create alerts that trigger a stored XSS attack. POC * go to the alert manager * open the ITSM tab * add a webhook with the URL/service token value ' -h && id | tee /tmp/ttttttddddssss #' (whitespaces are tab characters) * …