CVE-2024-28112 Cross site scripting on router page in Peering Manager
Stored XSS in Peering Manager allows attackers to execute arbitrary JavaScript, potentially stealing user credentials or tokens.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- A user has to click or open something
- Fix
- None listed
What is CVE-2024-28112?
CVE-2024-28112 is a medium-severity cross-site scripting vulnerability in peering-manager, published on 12 Mar 2024. An attacker needs administrator access to exploit it, and only if a user opens a file or follows a link.
Official description
Peering Manager is a BGP session management tool. Affected versions of Peering Manager are subject to a potential stored Cross-Site Scripting (XSS) attack in the `name` attribute of AS or Platform. The XSS triggers on a routers detail page. Adversaries are able to execute arbitrary JavaScript code with the permission of a victim. XSS attacks are often used to steal credentials or login tokens of other users. This issue has been addressed in version 1.8.3. Users are advised to upgrade. There are no known workarounds for this vulnerability.
Weakness: CWE-79
Which versions are affected by CVE-2024-28112?
It affects 1 product.
Products include Peering-Manager Peering Manager.
How do I fix CVE-2024-28112?
No fix has been published for CVE-2024-28112 yet. Limit exposure of the affected software until one is available.
Escape output for the context it lands in and set a strict Content Security Policy. Upgrading the affected component is the real fix. More about Cross-site scripting.
Is CVE-2024-28112 being exploited?
There is no known exploitation of CVE-2024-28112 in the wild and no public exploit code.
Other vulnerabilities in peering-manager
Sources
Also known as GHSA-fmf5-24pq-rq2w.