Skip to content
OpenAdvisories

Package · Ubuntu

prometheus-alertmanager

1 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 7.5
    CVE-2023-40577

    Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint

    Alertmanager handles alerts sent by client applications such as the Prometheus server. An attacker with the permission to perform POST requests on the /api/v1/alerts endpoint could be able to execute arbitrary JavaScript code on the users of Prometheus Alertm…

    prometheus alertmanager prometheus-alertmanager promxy Debian Ubuntu Alpine Wolfi Go