GCVE - cpe:2.3:a:peering-manager:peering_manager:*:*:*:*:*:*:*:*

Approved changes feed: RSS · Atom

cpe:2.3:a:peering-manager:peering_manager:*:*:*:*:*:*:*:*

part: a version: * update: *

Vendor	Peering Manager (`057acc58-4617-553a-a08b-4140a9a5fac5`)
Product	Peering Manager (`d75ee036-5a8f-57af-8709-b9f4921154c4`)
Edition	*
Language	*
Software edition	*
Target software	*
Target hardware	*
Other	*
Notes	Imported from purl2cpe mapping

PURL mappings

PURL	Source	Last updated
`pkg:docker/peeringmanager/peering-manager`	purl2cpe	2026-06-01 10:11:28.462305
`pkg:github/peering-manager/peering-manager`	purl2cpe	2026-06-01 10:11:28.462308

Vulnerability references

Identifier	cpeApplicability	Submitted	db.gcve.eu details	Rationale
`CVE:CVE-2024-28114`	vulnerable	2026-06-08 06:33:26.494592	Remote Code Execution using Server Side Template Injection in Peering Manager HIGH (8.1) Peering Manager is a BGP session management tool. There is a Server Side Template Injection vulnerability that leads to Remote Code Execution in Peering Manager <=1.8.2. As a result arbitrary commands can be executed on the operating system that is running Peering Manager. This issue has been addressed in version 1.8.3. Users are advised to upgrade. There are no known workarounds for this vulnerability. Published: 2024-03-12T19:58:39.859Z Updated: 2024-08-28T16:23:15.497Z Open on db.gcve.eu Reference links https://github.com/peering-manager/peering-manager/security/advisories/GHSA-q37x-qfrx-jcv6 https://github.com/peering-manager/peering-manager/commit/8a865fb596c11ad7caf45aef317d8fcbce7f85ff https://owasp.org/www-community/attacks/Command_Injection https://owasp.org/www-project-web-security-testing-guide/v41/4-Web_Application_Security_Testing/07-Input_Validation_Testing/18-Testing_for_Server_Side_Template_Injection https://stackoverflow.com/questions/73939573/how-to-sanitise-string-of-python-code-with-python	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-28113`	vulnerable	2026-06-08 06:33:26.494110	Open redirection using the return_url parameter in Peering Manager LOW (3.5) Peering Manager is a BGP session management tool. In Peering Manager <=1.8.2, it is possible to redirect users to an arbitrary page using a crafted url. As a result users can be redirected to an unexpected location. This issue has been addressed in version 1.8.3. Users are advised to upgrade. There are no known workarounds for this vulnerability. Published: 2024-03-12T19:56:01.358Z Updated: 2024-08-02T00:48:49.208Z Open on db.gcve.eu Reference links https://github.com/peering-manager/peering-manager/security/advisories/GHSA-f4mf-5g28-q7f5 https://github.com/peering-manager/peering-manager/commit/49dc5593184d7740d81e57dbbe3f971d2969dfac	Imported from gcve-enriched-dumps CVE data
`CVE:CVE-2024-28112`	vulnerable	2026-06-08 06:33:26.493656	Cross site scripting on router page in Peering Manager MEDIUM (6.1) Peering Manager is a BGP session management tool. Affected versions of Peering Manager are subject to a potential stored Cross-Site Scripting (XSS) attack in the `name` attribute of AS or Platform. The XSS triggers on a routers detail page. Adversaries are able to execute arbitrary JavaScript code with the permission of a victim. XSS attacks are often used to steal credentials or login tokens of other users. This issue has been addressed in version 1.8.3. Users are advised to upgrade. There are no known workarounds for this vulnerability. Published: 2024-03-12T19:54:16.219Z Updated: 2024-08-26T14:03:19.025Z Open on db.gcve.eu Reference links https://github.com/peering-manager/peering-manager/security/advisories/GHSA-fmf5-24pq-rq2w https://owasp.org/www-community/attacks/xss	Imported from gcve-enriched-dumps CVE data

Contribute

You can submit an edit proposal for this CPE entry or suggest a related product/vendor addition using the action button above.