CVE-2022-41413

perfSONAR v4.x <= v4.4.5 was discovered to contain a Cross-Site Request Forgery (CSRF) which is triggered when an attacker injects crafted input into the Search function.

CVSS v3.1 NVD

4.3 MEDIUMCVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:N/I:L/A:N

EPSS

2.15% chance of exploitation in the next 30 days, 82nd percentile

Published

2022-11-30

Updated

2025-05-02

ExploitDB entries (1)

• https://www.exploit-db.com/exploits/51186

Security advisories

• http://packetstormsecurity.com/files/170070/perfSONAR-4.4.5-Cross-Site-Request-Forgery.ht…
• renmizo/CVE-2022-41413

References

• CVE Record
• NVD entry