Lucene search
HistoryNov 30, 2022 - 5:15 a.m.
CVE-2022-41412
cve-2022-41412
perfsonar
graphdata.cgi
ssrf
vulnerability
server-side request forgery
sensitive data access
8.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
0.038 Low
EPSS
Percentile
91.9%
An issue in the graphData.cgi component of perfSONAR v4.4.5 and prior allows attackers to access sensitive data and execute Server-Side Request Forgery (SSRF) attacks.
Affected configurations
Node
perfsonarperfsonarRange4.0–4.4.5
Related
prion
prion
Server side request forgery (ssrf)
2022-11-30 05:15:00
cve
cve
CVE-2022-41412
2022-11-30 05:15:11
cvelist
cvelist
CVE-2022-41412
2022-11-30 00:00:00
nuclei
nuclei
perfSONAR 4.x <= 4.4.4 - Server-Side Request Forgery
2024-04-03 08:54:42
8.6 High
CVSS3
Attack Vector
NETWORK
Attack Complexity
LOW
Privileges Required
NONE
User Interaction
NONE
Scope
CHANGED
Confidentiality Impact
HIGH
Integrity Impact
NONE
Availability Impact
NONE
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
0.038 Low
EPSS
Percentile
91.9%
Related for NVD:CVE-2022-41412