perfsonar records

8 published records for vendor perfsonar.

Researcher profile

Entered KEV: 0 · 0%
Weaponized: 0 · 0%
Pre-auth RCE: 0
With a fix record: 0%
Median publish → KEV: No record has entered KEV

Records by year

Bar: total · dark part: CISA KEV.

Recurring classes

The weakness classes this vendor ships most often: where to look.

Attack profile

All records

8 records

CVE records
Action	CVE	Vulnerability	Severity	KEV	EPSS	Published
35Monitor	CVE-2022-41412Proof of concept	An issue in the graphData.cgi component of perfSONAR v4.4.5 and prior allows attackers to access sensitive data and execute Server-Side Requperfsonar · perfsonar · CWE-918 Pre-auth SSRF	High8.6	—	4.5%	Nov 30, 2022
23Monitor	CVE-2018-12523Proof of concept	An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2.perfsonar · monitoring and debugging dashboard · CWE-200 Pre-auth Info leak	Medium5.3	—	7.1%	Jun 18, 2018
23Monitor	CVE-2018-12524Proof of concept	An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2.perfsonar · monitoring and debugging dashboard · CWE-200 Pre-auth Info leak	Medium5.3	—	7.1%	Jun 18, 2018
23Monitor	CVE-2018-12525Proof of concept	An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2.perfsonar · monitoring and debugging dashboard · CWE-200 Pre-auth Info leak	Medium5.3	—	7.1%	Jun 18, 2018
23Monitor	CVE-2018-12522Proof of concept	An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2.perfsonar · monitoring and debugging dashboard · CWE-200 Pre-auth Info leak	Medium5.3	—	7.1%	Jun 18, 2018
21Monitor	CVE-2022-45213No exploit	perfSONAR before 4.4.6 inadvertently supports the parse option for a file:// URL.perfsonar · perfsonar · CWE-73 Pre-auth Path traversal	Medium5.3	—	0.6%	Jan 1, 2023
21Monitor	CVE-2022-45027No exploit	perfSONAR before 4.4.6, when performing participant discovery, incorrectly uses an HTTP request header value to determine a local address.perfsonar · perfsonar · CWE-918 Pre-auth SSRF	Medium5.3	—	0.6%	Jan 1, 2023
18Monitor	CVE-2022-41413Proof of concept	perfSONAR v4.x <= v4.4.5 was discovered to contain a Cross-Site Request Forgery (CSRF) which is triggered when an attacker injects crafted iperfsonar · perfsonar · CWE-352 Pre-auth CSRF	Medium4.3	—	2.1%	Nov 30, 2022

CVE-2022-41412
35Monitor
An issue in the graphData.cgi component of perfSONAR v4.4.5 and prior allows attackers to access sensitive data and execute Server-Side Requ
HighCVSS 8.6Proof of conceptEPSS 4%
- Pre-auth
- SSRF
perfsonar · perfsonarNov 30, 2022
CVE-2018-12523
23Monitor
An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2.
MediumCVSS 5.3Proof of conceptEPSS 7%
- Pre-auth
- Info leak
perfsonar · monitoring and debugging dashboardJun 18, 2018
CVE-2018-12524
23Monitor
An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2.
MediumCVSS 5.3Proof of conceptEPSS 7%
- Pre-auth
- Info leak
perfsonar · monitoring and debugging dashboardJun 18, 2018
CVE-2018-12525
23Monitor
An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2.
MediumCVSS 5.3Proof of conceptEPSS 7%
- Pre-auth
- Info leak
perfsonar · monitoring and debugging dashboardJun 18, 2018
CVE-2018-12522
23Monitor
An issue was discovered in perfSONAR Monitoring and Debugging Dashboard (MaDDash) 2.0.2.
MediumCVSS 5.3Proof of conceptEPSS 7%
- Pre-auth
- Info leak
perfsonar · monitoring and debugging dashboardJun 18, 2018
CVE-2022-45213
21Monitor
perfSONAR before 4.4.6 inadvertently supports the parse option for a file:// URL.
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
- Path traversal
perfsonar · perfsonarJan 1, 2023
CVE-2022-45027
21Monitor
perfSONAR before 4.4.6, when performing participant discovery, incorrectly uses an HTTP request header value to determine a local address.
MediumCVSS 5.3No exploitEPSS 1%
- Pre-auth
- SSRF
perfsonar · perfsonarJan 1, 2023
CVE-2022-41413
18Monitor
perfSONAR v4.x <= v4.4.5 was discovered to contain a Cross-Site Request Forgery (CSRF) which is triggered when an attacker injects crafted i
MediumCVSS 4.3Proof of conceptEPSS 2%
- Pre-auth
- CSRF
perfsonar · perfsonarNov 30, 2022