cve-2021-30119

{
  "cvss": 0.0,
  "datePublished": "2021-07-06T00:00:00Z",
  "dateUpdated": "2021-07-06T00:00:00Z",
  "description": "Authenticated reflective XSS in HelpDeskTab/rcResults.asp The parameter result of /HelpDeskTab/rcResults.asp is insecurely returned in the requested web page and can be used to perform a Cross Site Scripting attack Example request: `https://x.x.x.x/HelpDeskTab/rcResults.asp?result=alert(document.cookie)` The same is true for the parameter FileName of /done.asp Eaxmple request: `https://x.x.x.x/done.asp?FileName=\";alert(1);a=\"&PathData=&originalName=shell.aspx&FileSize=4388&TimeElapsed=00:00:00.078`",
  "dueDate": "",
  "id": "CVE-2021-30119",
  "kev_catalogs": [
    "vulncheck"
  ],
  "knownRansomwareCampaignUse": "Known",
  "product": "vsa",
  "requiredAction": "Apply remediations or mitigations per vendor instructions or discontinue use of the product if remediation or mitigations are unavailable.",
  "severity": "CRITICAL",
  "source": "vulncheck_kev",
  "title": "Kaseya vsa Improper Neutralization of Input During Web Page Generation",
  "vendor": "Kaseya"
}