CVE-2022-45213

概要

参考情報

• perfsonar.net/releasenotes-2022-11-09-4-4-6.html · Release Notes
• zxsecurity.co.nz/research/advisories/perfsonar-multiple · Exploit

perfsonar のその他の脆弱性

• CVE-2022-45027中 5.3perfSONAR before 4.4.6, when performing participant discovery, incorrectly uses an HTTP request header value to determine a local address.
• CVE-2022-41413中 4.3perfSONAR v4.x <= v4.4.5 was discovered to contain a Cross-Site Request Forgery (CSRF) which is triggered when an attacker injects crafted i…
• CVE-2022-41412高 8.6An issue in the graphData.cgi component of perfSONAR v4.4.5 and prior allows attackers to access sensitive data and execute Server-Side Requ…