Github.Com Prometheus Alertmanager vulnerabilities

1 known vulnerability affecting github.com/prometheus_alertmanager.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

Page 1 of 1

CVE-2023-40577MEDIUM≥ 0, < 0.25.12023-08-23

CVE-2023-40577 [MEDIUM] CWE-79 Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint ### Impact An attacker with the permission to perform POST requests on the /api/v1/alerts endpoint could be able to execute arbitrary JavaScript code on the users of Prometheus Alertmanager. ### Patches Users can upgrade to Alertmanager v0.2.51. ### Workarounds Users can setup a reverse proxy in front of the A