what you don't know can hurt you

Register | Login

FilesNewsUsersAuthors

Home Files News &[SERVICES_TAB]About Contact Add New

Showing 1 - 3 of 3

Files from Ryan Moore

perfSONAR 4.4.5 Cross Site Request Forgery

Posted Apr 3, 2023

Authored by Ryan Moore

perfSONAR versions 4.x through 4.4.5 suffer from a partially blind cross site request forgery vulnerability.

tags | exploit, csrf

advisories | CVE-2022-41413

SHA-256 | 24f04c58f2fef4b471d6bb57b59760683c12f4fdab2b5b9f66bd063d707e5662

Download | Favorite | View

perfSONAR 4.4.5 Cross Site Request Forgery

Posted Nov 30, 2022

Authored by Ryan Moore | Site github.com

A partial blind cross site request forgery (CSRF) vulnerability exists in perfSONAR versions 4.x through 4.4.5 within the /perfsonar-graphs/ test results page. Parameters and values can be injected/passed via the URL parameter, forcing the client to connect unknowingly in the background to other sites via transparent XMLHTTPRequests. This partial blind CSRF bypasses the built-in whitelisting function in perfSONAR.

tags | exploit, csrf

advisories | CVE-2022-41413

SHA-256 | 44092efeff9a22718267fc8ee3d1add5f9f7c1bd035ed2fb94ece0d6baf60239

Download | Favorite | View

perfSONAR 4.4.4 Open Proxy / Relay

Posted Nov 30, 2022

Authored by Ryan Moore | Site github.com

perfSONAR bundles with it a graphData.cgi script, used to graph and visualize data. There is a flaw in graphData.cgi allowing for unauthenticated users to proxy and relay HTTP/HTTPS traffic through the perfSONAR server. The vulnerability can potentially be leveraged to exfiltrate or enumerate data from internal web servers. This vulnerability was patched in perfSONAR version 4.4.5. Versions 4.x through 4.4.4 are affected. There is a whitelisting function that will mitigate, but is disabled by default.

tags | exploit, web, cgi

advisories | CVE-2022-41412

SHA-256 | 57258cc3a50359f248bba303d6a0892af6f77e5cbd93340c72b5018222e14550

Download | Favorite | View