CVE-2022-45213

Description

perfSONAR before 4.4.6 inadvertently supports the parse option for a file:// URL.

Affected Platforms

Weakness Type

NVD-CWE-noinfo, CWE-73

References

• https://www.perfsonar.net/releasenotes-2022-11-09-4-4-6.html
• https://zxsecurity.co.nz/research/advisories/perfsonar-multiple/
• https://www.perfsonar.net/releasenotes-2022-11-09-4-4-6.html
• https://zxsecurity.co.nz/research/advisories/perfsonar-multiple/