CVE-2022-41412

An issue in the graphData.cgi component of perfSONAR v4.4.5 and prior allows attackers to access sensitive data and execute Server-Side Request Forgery (SSRF) attacks.

Score

CVSS 3.1 8.6 High

Status

Modified - cve@mitre.org

Published

2022-11-30

Last modified

2025-04-24

Weaknesses

CWE-918

Affected products

• Perfsonar (Perfsonar)

References

• http://packetstormsecurity.com/files/170069/perfSONAR-4.4.4-Open-Proxy-Relay.html
• https://github.com/renmizo/CVE-2022-41412