CVE-2022-41412

Summary

An issue in the graphData.cgi component of perfSONAR v4.4.5 and prior allows attackers to access sensitive data and execute Server-Side Request Forgery (SSRF) attacks.

Affected Software

Weaknesses

• n/a

ADP Enrichment

CVE Program Container

Additional References

• https://github.com/renmizo/CVE-2022-41412
• http://packetstormsecurity.com/files/170069/perfSONAR-4.4.4-Open-Proxy-Relay.html

CISA ADP Vulnrichment

• SSVC:
• Exploitation: poc
  • Automatable: yes
  • Technical Impact: partial

Additional References

• https://github.com/renmizo/CVE-2022-41412

References

• https://github.com/renmizo/CVE-2022-41412
• http://packetstormsecurity.com/files/170069/perfSONAR-4.4.4-Open-Proxy-Relay.html

• ←Previous
• Next→