CVE-2022-41413

Mô tả

Tham khảo

• packetstormsecurity.com/files/170070/perfSONAR-4.4.5-Cross-Site-Request-Forgery.html · Third Party Advisory
• packetstormsecurity.com/files/171629/perfSONAR-4.4.5-Cross-Site-Request-Forgery.html
• renmizo/CVE-2022-41413 · Third Party Advisory

Lỗ hổng khác của perfsonar

• CVE-2022-45213TRUNG BÌNH 5.3perfSONAR before 4.4.6 inadvertently supports the parse option for a file:// URL.
• CVE-2022-45027TRUNG BÌNH 5.3perfSONAR before 4.4.6, when performing participant discovery, incorrectly uses an HTTP request header value to determine a local address.
• CVE-2022-41412CAO 8.6An issue in the graphData.cgi component of perfSONAR v4.4.5 and prior allows attackers to access sensitive data and execute Server-Side Requ…