CVE-2024-28114

CRITIQUE 9.1CVE-2024-28114 · Published 12/03/2024 · updated 17/06/2026

En bref

CVE-2024-28114 est une vulnérabilité CRITIQUE (CVSS 9.1) touchant peering manager (peering-manager).
Probabilité d'exploitation dans les 30 prochains jours (EPSS) : 1.3%, plus élevée que 71.2% des vulnérabilités.
Correctif : mettre à jour vers 1.8.3 ou plus récent.

Package	Affected versions	Patched versions
peering manager peering-manager	`< 1.8.3`	`1.8.3`

Description

Peering Manager is a BGP session management tool. There is a Server Side Template Injection vulnerability that leads to Remote Code Execution in Peering Manager <=1.8.2. As a result arbitrary commands can be executed on the operating system that is running Peering Manager. This issue has been addressed in version 1.8.3. Users are advised to upgrade. There are no known workarounds for this vulnerability.

References

peering-manager/peering-manager commit 8a865fb · Patch
peering-manager/peering-manager security advisory · Exploit
owasp.org/www-community/attacks/Command_Injection · Not Applicable
owasp.org/www-project-web-security-testing-guide/v41/4-Web_Application_Security_Testing/07-Input_Validation_Testing/18-Testing_for_Server_Side_Template_Injection · Not Applicable
stackoverflow.com/questions/73939573/how-to-sanitise-string-of-python-code-with-python · Not Applicable

Autres vulnérabilités de peering manager

Tout voir →

Running one of these products? Scan your site to see whether it exposes a vulnerable version.

Scan my site free

Package

Affected versions

Patched versions

peering manager

peering-manager

< 1.8.3

1.8.3

Description

Autres vulnérabilités de peering manager

Tout voir →