Vulners
Lucene search
perfSONAR v4.4.5 - Partial Blind CSRF
| Reporter | Title | Published | Views | Family All 14 |
|---|---|---|---|---|
 | perfSONAR v4.4.5 - Partial Blind CSRF Vulnerability | 2 Apr 202300:00 | – | zdt |
 | Exploit for Cross-Site Request Forgery (CSRF) in Perfsonar | 29 Nov 202202:42 | – | githubexploit |
 | CVE-2022-41413 | 30 Nov 202207:29 | – | circl |
 | perfSONAR 跨站请求伪造漏洞 | 30 Nov 202200:00 | – | cnnvd |
 | CVE-2022-41413 | 30 Nov 202200:00 | – | cve |
 | CVE-2022-41413 | 30 Nov 202200:00 | – | cvelist |
 | EUVD-2022-44606 | 3 Oct 202520:07 | – | euvd |
 | CVE-2022-41413 | 30 Nov 202205:15 | – | nvd |
 | CVE-2022-41413 | 30 Nov 202205:15 | – | osv |
 | perfSONAR 4.4.5 Cross Site Request Forgery | 3 Apr 202300:00 | – | packetstorm |
10
Exploit Title: perfSONAR v4.4.5 - Partial Blind CSRF
Link: https://github.com/perfsonar/
Affected Versions: v4.x <= v4.4.5
Vulnerability Type: Partial Blind CSRF
Discovered by: Ryan Moore
CVE: CVE-2022-41413
Summary
A partial blind CSRF vulnerability exists in perfSONAR v4.x <= v4.4.5 within the /perfsonar-graphs/ test results page. Parameters and values can be injected/passed via the URL parameter, forcing the client to connect unknowingly in the background to other sites via transparent XMLHTTPRequests. This partial blind CSRF bypasses the built-in whitelisting function in perfSONAR.
This vulnerability was patched in perfSONAR v4.4.6.
Proof of Concept
Examples
Here are two examples of this vulnerability. For further details, review the Technical Overview section below.
Example 1:
Client browser connects to www.google.com in the background.
http://192.168.68.145/perfsonar-graphs/?source=1&dest=2&url=https://www.google.com
Example 2:
Client browser connects to arbitrary IP and port in the background, passing delete parameter to /api endpoint.
http://192.168.68.145/perfsonar-graphs/?source=8.8.8.8&dest=%26action%3Ddelete&url=http://192.168.68.113:4444/apiData
Build on a solid foundation with Vulners data
We provide the essential building blocks for cybersecurity solutions with comprehensive, structured, and constantly updated vulnerability and exploits data
Api
Power your application with Vulners API
The Vulners REST API offers reliable, high-performance access to vulnerability intelligence, with 99.9% SLA uptime and CDN-backed data delivery for seamless global access
App
Assess and manage vulnerabilities with Vulners tools
Built on top of Vulners' database and SDK, end-user solutions give security professionals and developers lightweight and powerful tools for vulnerability remediation
01 Apr 2023 00:00Current
5.1Medium risk
Vulners AI Score5.1
CVSS 3.14.3
EPSS0.01516
SSVC