Code injection

2023-01-0108:15:00

PRIOn knowledge base

www.prio-n.com

code injection

perfsonar

parse option

file:// url

nvd

5.4 Medium

AI Score

Confidence

High

0.001 Low

EPSS

Percentile

35.6%

perfSONAR before 4.4.6 inadvertently supports the parse option for a file:// URL.

CPENameOperatorVersion
perfsonarlt4.4.6

CPE	Name	Operator	Version
	perfsonar	lt	4.4.6

References

www.perfsonar.net/releasenotes-2022-11-09-4-4-6.html

zxsecurity.co.nz/research/advisories/perfsonar-multiple/