CVE-2022-41413

perfSONAR v4.x <= v4.4.5 was discovered to contain a Cross-Site Request Forgery (CSRF) which is triggered when an attacker injects crafted input into the Search function.

Score

CVSS 3.1 4.3 Medium

Status

Modified - cve@mitre.org

Published

2022-11-30

Last modified

2025-05-02

Weaknesses

CWE-352

Affected products

• Perfsonar (Perfsonar)

References

• http://packetstormsecurity.com/files/170070/perfSONAR-4.4.5-Cross-Site-Request-Forgery.html
• http://packetstormsecurity.com/files/171629/perfSONAR-4.4.5-Cross-Site-Request-Forgery.html
• https://github.com/renmizo/CVE-2022-41413