CVE-2024-28113

Peering Manager is a BGP session management tool. In Peering Manager <=1.8.2, it is possible to redirect users to an arbitrary page using a crafted url. As a result users can be redirected to an unexpected location. This issue has been addressed in version 1.8.3. Users are advised to upgrade. There are no known workarounds for this vulnerability.

• CWE-601
• CWE-601

• https://github.com/peering-manager/peering-manager/commit/49dc5593184d7740d81e57dbbe3f971d2969dfacPatch
• https://github.com/peering-manager/peering-manager/security/advisories/GHSA-f4mf-5g28-q7f5Exploit, Vendor Advisory
• https://github.com/peering-manager/peering-manager/commit/49dc5593184d7740d81e57dbbe3f971d2969dfacPatch
• https://github.com/peering-manager/peering-manager/security/advisories/GHSA-f4mf-5g28-q7f5Exploit, Vendor Advisory

Published

Mar 12, 2024

Last Modified

Jun 17, 2026

Status

Analyzed

• One Click Account Takeover in GranolaHow a notification link broke out of Electron and led to a one-click account takeover.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-28108phpMyFAQ is an open source FAQ web application for PHP 8.1+ …6.1
• CVE-2024-28109veraPDF-library is a PDF/A validation library. Executing pol…8.1
• CVE-2024-2811A vulnerability was found in Tenda AC15 15.03.20_multi and c…9.8
• CVE-2024-28110Go SDK for CloudEvents is the official CloudEvents SDK to in…7.5
• CVE-2024-28111Canarytokens helps track activity and actions on a network. …6.5
• CVE-2024-28112Peering Manager is a BGP session management tool. Affected v…4.8
• CVE-2024-28114Peering Manager is a BGP session management tool. There is a…9.1
• CVE-2024-28115FreeRTOS is a real-time operating system for microcontroller…7.8
• CVE-2024-28116Grav is an open-source, flat-file content management system.…8.8
• CVE-2024-28117Grav is an open-source, flat-file content management system.…8.8
• CVE-2024-28118Grav is an open-source, flat-file content management system.…8.8
• CVE-2024-28119Grav is an open-source, flat-file content management system.…8.8