CVE-2022-41412
HIGH EXPLOITED NUCLEIperfsonar < 4.4.5 - Server-Side Request Forgery via graphData.cgi
Title source: llmExploitation Summary
CVE-2022-41412 has been observed exploited in the wild (reported by VulnCheck KEV). EIP tracks 1 public exploit from researchers including renmizo. A Nuclei detection template is also available.
AI-analyzed exploit summary The repository provides a detailed writeup and proof-of-concept examples for CVE-2022-41412, an open proxy relay vulnerability in perfSONAR's graphData.cgi script. It demonstrates how unauthenticated users can proxy HTTP/HTTPS traffic through the server, potentially exfiltrating data from internal web servers.
Description
An issue in the graphData.cgi component of perfSONAR v4.4.5 and prior allows attackers to access sensitive data and execute Server-Side Request Forgery (SSRF) attacks.
Exploits (1)
The repository provides a detailed writeup and proof-of-concept examples for CVE-2022-41412, an open proxy relay vulnerability in perfSONAR's graphData.cgi script. It demonstrates how unauthenticated users can proxy HTTP/HTTPS traffic through the server, potentially exfiltrating data from internal web servers.
Nuclei Templates (1)
title="perfSONAR Toolkit" || title="perfsonar toolkit"
References (2)
Scores
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N