Search vulnerabilities

Use the Query Builder to create your own search query, or check out the documentation to learn the search syntax.

Results 4

Export CSV
CVE-2022-41413

perfSONAR v4.x <= v4.4.5 was discovered to contain a Cross-Site Request Forgery (CSRF) which is triggered when an attacker injects crafted input into the Search function.

CVSS 3.1 · 4.3 Medium EPSS 2.2% KEV · Not listed
Vendors
Perfsonar
Products
Perfsonar
CVE-2022-41412

An issue in the graphData.cgi component of perfSONAR v4.4.5 and prior allows attackers to access sensitive data and execute Server-Side Request Forgery (SSRF) attacks.

CVSS 3.1 · 8.6 High EPSS 4.7% KEV · Not listed
Vendors
Perfsonar
Products
Perfsonar
CVE-2022-45027

perfSONAR before 4.4.6, when performing participant discovery, incorrectly uses an HTTP request header value to determine a local address.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Perfsonar
Products
Perfsonar
CVE-2022-45213

perfSONAR before 4.4.6 inadvertently supports the parse option for a file:// URL.

CVSS 3.1 · 5.3 Medium EPSS < 1% KEV · Not listed
Vendors
Perfsonar
Products
Perfsonar