Server side request forgery (ssrf)

2022-11-3005:15:00

PRIOn knowledge base

www.prio-n.com

server-side request forgery

perfsonar v4.4.5

graphdata.cgi

ssrf vulnerability

8.6 High

AI Score

Confidence

High

0.038 Low

EPSS

Percentile

91.9%

JSON

An issue in the graphData.cgi component of perfSONAR v4.4.5 and prior allows attackers to access sensitive data and execute Server-Side Request Forgery (SSRF) attacks.

CPENameOperatorVersion
perfsonarge4.0
perfsonarlt4.4.5

CPE	Name	Operator	Version
	perfsonar	ge	4.0
	perfsonar	lt	4.4.5

References

packetstormsecurity.com/files/170069/perfSONAR-4.4.4-Open-Proxy-Relay.html

github.com/renmizo/CVE-2022-41412