CVE-2021-30119: Authenticated Authenticated reflective XSS in Kaseya VSA <= v9.5.6
Authenticated reflective XSS in HelpDeskTab/rcResults.asp The parameter result of /HelpDeskTab/rcResults.asp is insecurely returned in the requested web page and can be used to perform a Cross Site Scripting attack Example request: https://x.x.x.x/HelpDeskTab/rcResults.asp?result=<script>alert(document.cookie)</script> The same is true for the parameter FileName of /done.asp Eaxmple request: https://x.x.x.x/done.asp?FileName=";</script><script>alert(1);a="&PathData=&originalName=shell.aspx&FileSize=4388&TimeElapsed=00:00:00.078
Affected Software
Remediation
Patch Available
Patch Available
Information
Event History
Frequently Asked Questions
What is the severity of CVE-2021-30119?
CVE-2021-30119 is classified as a medium severity vulnerability due to its potential for authenticated reflective XSS attacks.
How do I fix CVE-2021-30119?
To fix CVE-2021-30119, ensure that the 'result' parameter in the rcResults.asp file is properly sanitized before being rendered on the webpage.
What software is affected by CVE-2021-30119?
CVE-2021-30119 affects Kaseya VSA versions prior to 9.5.7.
What type of attack can CVE-2021-30119 facilitate?
CVE-2021-30119 can facilitate Cross Site Scripting (XSS) attacks through the insecure handling of user input.
Is CVE-2021-30119 an authenticated or unauthenticated vulnerability?
CVE-2021-30119 is an authenticated vulnerability, meaning that an attacker must be logged in to exploit it.