CVE-2022-41412

Severity: high (CVSS 8.6 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 4.5% probability of exploitation in the next 30 days
Public exploit or detection template: yes
Published: 2022-11-30 · updated 2026-06-17
Weakness: CWE-918

Description

An issue in the graphData.cgi component of perfSONAR v4.4.5 and prior allows attackers to access sensitive data and execute Server-Side Request Forgery (SSRF) attacks.

Affected products

Perfsonar: from 4.0 before 4.4.5 — fixed in 4.4.5

How to fix

Upgrade to a fixed version: Perfsonar 4.4.5. Check the vendor advisory for mitigations.

References

http://packetstormsecurity.com/files/170069/perfSONAR-4.4.4-Open-Proxy-Relay.html
https://github.com/renmizo/CVE-2022-41412
http://packetstormsecurity.com/files/170069/perfSONAR-4.4.4-Open-Proxy-Relay.html
https://github.com/renmizo/CVE-2022-41412
https://github.com/renmizo/CVE-2022-41412

Get alerted when CVE-2022-41412 or the next vulnerability affects your stack