~/products/github.com/prometheus_alertmanager

pipeline liveDigest Docs

Github.Com Prometheus Alertmanager vulnerabilities

1 known vulnerability affecting github.com/prometheus_alertmanager.

Total CVEs

1

CISA KEV

0

Public exploits

0

Exploited in wild

0

Severity breakdown

MEDIUM1

Vulnerabilities

SortPage 1 of 1

CVE-2023-40577P4MEDIUM≥ 0, < 0.25.12023-08-23

CVE-2023-40577 [MEDIUM] CWE-79 Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint ### Impact An attacker with the permission to perform POST requests on the /api/v1/alerts endpoint could be able to execute arbitrary JavaScript code on the users of Prometheus Alertmanager. ### Patches Users can upgrade to Alertmanager v0.2.51. ### Workarounds Users can setup a reverse proxy in front of the A

Github.Com Prometheus Alertmanager vulnerabilities | cvebase