CVE-2022-41412: Perfsonar

High severity, CVSS 8.6. EPSS: 4.5% chance of exploitation in the next 30 days.

An issue in the graphData.cgi component of perfSONAR v4.4.5 and prior allows attackers to access sensitive data and execute Server-Side Request Forgery (SSRF) attacks.

Affected products

  • Perfsonar Perfsonar: from 4.0, before 4.4.5 (fixed in 4.4.5)

Published 2022-11-30. Last modified 2026-06-17.