Lucene search

PRIOn knowledge basePRION:CVE-2022-41413

HistoryNov 30, 2022 - 5:15 a.m.

Cross site request forgery (csrf)

2022-11-3005:15:00

PRIOn knowledge base

www.prio-n.com

perfsonar

v4.x

v4.4.5

cross-site request forgery

csrf

search function

4.7 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.8%

JSON

perfSONAR v4.x <= v4.4.5 was discovered to contain a Cross-Site Request Forgery (CSRF) which is triggered when an attacker injects crafted input into the Search function.

CPENameOperatorVersion
perfsonarge4.0
perfsonarle4.4.5

CPE	Name	Operator	Version
	perfsonar	ge	4.0
	perfsonar	le	4.4.5

References

packetstormsecurity.com/files/170070/perfSONAR-4.4.5-Cross-Site-Request-Forgery.html

packetstormsecurity.com/files/171629/perfSONAR-4.4.5-Cross-Site-Request-Forgery.html

github.com/renmizo/CVE-2022-41413