CVE-2022-41412

概要

参考情報

• packetstormsecurity.com/files/170069/perfSONAR-4.4.4-Open-Proxy-Relay.html · Third Party Advisory
• renmizo/CVE-2022-41412 · Third Party Advisory

perfsonar のその他の脆弱性

• CVE-2022-45213中 5.3perfSONAR before 4.4.6 inadvertently supports the parse option for a file:// URL.
• CVE-2022-45027中 5.3perfSONAR before 4.4.6, when performing participant discovery, incorrectly uses an HTTP request header value to determine a local address.
• CVE-2022-41413中 4.3perfSONAR v4.x <= v4.4.5 was discovered to contain a Cross-Site Request Forgery (CSRF) which is triggered when an attacker injects crafted i…