GCVE - cpe:2.3:a:perfsonar:perfsonar:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:perfsonar:perfsonar:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Perfsonar (`7704c886-d43a-5de8-b316-b682d4718e29`)
Product	Perfsonar (`041a67ef-6839-5ebb-85bf-da379c6ce39c`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from gcve-enriched-dumps CVE data

PURL mappings

PURL	Source	Last updated
No PURL mappings for this CPE yet.

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2022-45213`	vulnerable	2026-06-08 05:50:35.943297	Details available perfSONAR before 4.4.6 inadvertently supports the parse option for a file:// URL. Published: 2023-01-01T00:00:00.000Z Updated: 2025-04-10T19:19:44.782Z Open on db.gcve.eu Reference links https://www.perfsonar.net/releasenotes-2022-11-09-4-4-6.html https://zxsecurity.co.nz/research/advisories/perfsonar-multiple/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-45027`	vulnerable	2026-06-08 05:50:35.099675	Details available perfSONAR before 4.4.6, when performing participant discovery, incorrectly uses an HTTP request header value to determine a local address. Published: 2023-01-01T00:00:00.000Z Updated: 2025-04-11T13:52:56.723Z Open on db.gcve.eu Reference links https://www.perfsonar.net/releasenotes-2022-11-09-4-4-6.html https://zxsecurity.co.nz/research/advisories/perfsonar-multiple/	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-41413`	vulnerable	2026-06-08 05:48:30.370076	Details available perfSONAR v4.x <= v4.4.5 was discovered to contain a Cross-Site Request Forgery (CSRF) which is triggered when an attacker injects crafted input into the Search function. Published: 2022-11-30T00:00:00.000Z Updated: 2025-05-02T19:15:31.424Z Open on db.gcve.eu Reference links https://github.com/renmizo/CVE-2022-41413 http://packetstormsecurity.com/files/170070/perfSONAR-4.4.5-Cross-Site-Request-Forgery.html http://packetstormsecurity.com/files/171629/perfSONAR-4.4.5-Cross-Site-Request-Forgery.html	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2022-41412`	vulnerable	2026-06-08 05:48:30.369622	Details available An issue in the graphData.cgi component of perfSONAR v4.4.5 and prior allows attackers to access sensitive data and execute Server-Side Request Forgery (SSRF) attacks. Published: 2022-11-30T00:00:00.000Z Updated: 2025-04-24T19:43:49.419Z Open on db.gcve.eu Reference links https://github.com/renmizo/CVE-2022-41412 http://packetstormsecurity.com/files/170069/perfSONAR-4.4.4-Open-Proxy-Relay.html	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.