CVE-2021-30119 is an authenticated reflective Cross-Site Scripting (XSS) vulnerability affecting Kaseya VSA. Specifically, it allows an authenticated attacker to inject malicious scripts via the 'result' parameter in /HelpDeskTab/rcResults.asp and the 'FileName' parameter in /done.asp. This vulnerability carries a CVSS score of 5.4 (MEDIUM), indicating a network-based attack with low complexity, requiring user interaction and low privileges to achieve partial confidentiality and integrity impacts. While there is no public exploit code available in Metasploit, Nuclei, or ExploitDB, the vulnerability has garnered significant community discussion and media coverage, including reports of its exploitation in the REvil ransomware attacks, despite not being listed in CISA's KEV catalog.
| Vendor | Product | Version(s) | CPE |
|---|---|---|---|
< 9.5.7CPE matchmatch criteria | cpe:2.3:a:kaseya:vsa:*:*:*:*:-:*:*:* |
CVSS version used by this source: 3.1
CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:L/I:L/A:N
The average CVE in this peer group has 0.0 Twitter, 0.0 Reddit, 0.0 Bluesky, 0.0 Mastodon, and 0.1 GitHub mentions.
The average CVE in this peer group has 0.0 InfoSec Media, 0.0 Vendor Blog, and 0.0 Security Researcher mentions.
Remediation records are not available for this CVE.