CVE-2022-41412

Name of the Vulnerable Software and Affected Versions perfSONAR versions 4.4.5 and prior

Description An issue in the graphData.cgi component allows attackers to access sensitive data and execute Server-Side Request Forgery (SSRF) attacks.

Recommendations For versions 4.4.5 and prior, consider disabling the graphData.cgi component until a patch is available to prevent exploitation. Restrict access to sensitive data to minimize the risk of unauthorized access. As a temporary workaround, restrict the functionality of the graphData.cgi component to prevent SSRF attacks. At the moment, there is no information about a newer version that contains a fix for this vulnerability.