medium4.3Public exploit code
CVE-2022-41413
perfSONAR v4.x <= v4.4.5 was discovered to contain a Cross-Site Request Forgery (CSRF) which is triggered when an attacker injects crafted input into the Searc…
Public exploit code
Working exploit or proof of concept code has been published for this vulnerability. Treat unpatched systems as at risk.
- perfSONAR v4.4.5 - Partial Blind CSRF2023-04-01 · webapps · multiple
Impact
perfSONAR v4.x <= v4.4.5 was discovered to contain a Cross-Site Request Forgery (CSRF) which is triggered when an attacker injects crafted input into the Search function.
Affected products
| Vendor | Product | Affected versions |
|---|---|---|
| Perfsonar | Perfsonar | from 4.0 through 4.4.5 |
Weakness classification
References
- NVD record
- CVE.org record
- http://packetstormsecurity.com/files/170070/perfSONAR-4.4.5-Cross-Site-Request-Forgery.html
- http://packetstormsecurity.com/files/171629/perfSONAR-4.4.5-Cross-Site-Request-Forgery.html
- https://github.com/renmizo/CVE-2022-41413
- http://packetstormsecurity.com/files/170070/perfSONAR-4.4.5-Cross-Site-Request-Forgery.html
- http://packetstormsecurity.com/files/171629/perfSONAR-4.4.5-Cross-Site-Request-Forgery.html
- https://github.com/renmizo/CVE-2022-41413