References to Advisories, Solutions, and Tools

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address comments about this page to nvd@nist.gov.

Change History

https://github.com/peering-manager/peering-manager/security/advisories/GHSA-fmf5-24pq-rq2w

https://owasp.org/www-community/attacks/xss

Peering Manager is a BGP session management tool. Affected versions of Peering Manager are subject to a potential stored Cross-Site Scripting (XSS) attack in the `name` attribute of AS or Platform. The XSS triggers on a routers detail page. Adversaries are able to execute arbitrary JavaScript code with the permission of a victim. XSS attacks are often used to steal credentials or login tokens of other users. This issue has been addressed in version 1.8.3. Users are advised to upgrade. There are 

GitHub, Inc. AV:N/AC:L/PR:H/UI:R/S:U/C:H/I:H/A:N

GitHub, Inc. CWE-79

GitHub, Inc. https://github.com/peering-manager/peering-manager/security/advisories/GHSA-fmf5-24pq-rq2w [No types assigned]

GitHub, Inc. https://owasp.org/www-community/attacks/xss [No types assigned]