CVE-2024-28113

LOW

Peering-manager Peering Manager < 1.8.3 - Open Redirect

Title source: rule
STIX 2.1

Description

Peering Manager is a BGP session management tool. In Peering Manager <=1.8.2, it is possible to redirect users to an arbitrary page using a crafted url. As a result users can be redirected to an unexpected location. This issue has been addressed in version 1.8.3. Users are advised to upgrade. There are no known workarounds for this vulnerability.

References (2)

Core 2

Scores

CVSS v3 3.5
EPSS 0.0013
EPSS Percentile 32.0%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:U/C:L/I:L/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact partial

Details

CWE
CWE-601
Status published
Products (1)
peering-manager/peering_manager < 1.8.3
Published Mar 12, 2024
Tracked Since Feb 18, 2026