Description
Prometheus is an open-source monitoring system and time series database. In 2.23.0, Prometheus changed its default UI to the New ui. To ensure a seamless transition, the URL's prefixed by /new redirect to /. Due to a bug in the code, it is possible for an attacker to craft an URL that can redirect to any other URL, in the /new endpoint. If a user visits a prometheus server with a specially crafted address, they can be redirected to an arbitrary URL. The issue was patched in the 2.26.1 and 2.27.1 releases. In 2.28.0, the /new endpoint will be removed completely. The workaround is to disable access to /new via a reverse proxy in front of Prometheus.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| prometheus | prometheus | >= 2.23.0, < 2.27.1 | — |
Fixed in Linux distributions
Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.
Ubuntu
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Ubuntu 16.04 LTS | prometheus | No fix yet | — |
SUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| SUSE Manager Client Tools 15 | ansible | 2.9.21-1.5.1 | SUSE-SU-2021:2675-1 |
| SUSE Manager Client Tools 15 | dracut-saltboot | 0.1.1627546504.96a0b3e-1.27.1 | SUSE-SU-2021:2675-1 |
| SUSE Manager Client Tools 15 | golang-github-prometheus-prometheus | 2.27.1-3.31.1 | SUSE-SU-2021:2675-1 |
| SUSE Manager Client Tools 15 | mgr-cfg | 4.2.3-1.18.1 | SUSE-SU-2021:2675-1 |
| SUSE Manager Client Tools 15 | mgr-custom-info | 4.2.2-1.12.1 | SUSE-SU-2021:2675-1 |
| SUSE Manager Client Tools 15 | mgr-osad | 4.2.6-1.30.1 | SUSE-SU-2021:2675-1 |
| SUSE Manager Client Tools 15 | mgr-push | 4.2.3-1.12.1 | SUSE-SU-2021:2675-1 |
| SUSE Manager Client Tools 15 | mgr-virtualization | 4.2.2-1.20.1 | SUSE-SU-2021:2675-1 |
| SUSE Manager Client Tools 15 | rhnlib | 4.2.4-3.28.1 | SUSE-SU-2021:2675-1 |
| SUSE Manager Client Tools 15 | spacecmd | 4.2.11-3.62.1 | SUSE-SU-2021:2675-1 |
| SUSE Manager Client Tools 15 | spacewalk-client-tools | 4.2.12-3.44.1 | SUSE-SU-2021:2675-1 |
| SUSE Manager Client Tools 15 | spacewalk-koan | 4.2.4-3.21.1 | SUSE-SU-2021:2675-1 |
| SUSE Manager Client Tools 15 | spacewalk-oscap | 4.2.2-3.12.1 | SUSE-SU-2021:2675-1 |
| SUSE Manager Client Tools 15 | suseRegisterInfo | 4.2.4-3.15.1 | SUSE-SU-2021:2675-1 |
| SUSE Manager Client Tools 15 | uyuni-common-libs | 4.2.5-1.15.1 | SUSE-SU-2021:2675-1 |
| SUSE Manager Client Tools 12 | golang-github-prometheus-prometheus | 2.27.1-1.29.2 | SUSE-SU-2021:2673-1 |
| SUSE Manager Client Tools 12 | grafana | 7.5.7-1.21.2 | SUSE-SU-2021:2673-1 |
| SUSE Manager Client Tools 12 | mgr-cfg | 4.2.3-1.18.2 | SUSE-SU-2021:2673-1 |
| SUSE Manager Client Tools 12 | mgr-custom-info | 4.2.2-1.12.2 | SUSE-SU-2021:2673-1 |
| SUSE Manager Client Tools 12 | mgr-osad | 4.2.6-1.30.2 | SUSE-SU-2021:2673-1 |
| SUSE Manager Client Tools 12 | mgr-push | 4.2.3-1.12.2 | SUSE-SU-2021:2673-1 |
| SUSE Manager Client Tools 12 | mgr-virtualization | 4.2.2-1.20.2 | SUSE-SU-2021:2673-1 |
| SUSE Manager Client Tools 12 | rhnlib | 4.2.4-21.34.2 | SUSE-SU-2021:2673-1 |
| SUSE Manager Client Tools 12 | spacecmd | 4.2.11-38.85.2 | SUSE-SU-2021:2673-1 |
| SUSE Manager Client Tools 12 | spacewalk-client-tools | 4.2.12-52.53.2 | SUSE-SU-2021:2673-1 |
| SUSE Manager Client Tools 12 | spacewalk-koan | 4.2.4-24.24.2 | SUSE-SU-2021:2673-1 |
| SUSE Manager Client Tools 12 | spacewalk-oscap | 4.2.2-19.18.2 | SUSE-SU-2021:2673-1 |
| SUSE Manager Client Tools 12 | suseRegisterInfo | 4.2.4-25.18.2 | SUSE-SU-2021:2673-1 |
| SUSE Manager Client Tools 12 | uyuni-common-libs | 4.2.5-1.15.2 | SUSE-SU-2021:2673-1 |
| SUSE Enterprise Storage 6 | golang-github-prometheus-prometheus | 2.27.1-3.8.1 | SUSE-SU-2021:2664-1 |
openSUSE
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| openSUSE Tumbleweed | golang-github-prometheus-prometheus | 2.27.1-4.2 | openSUSE-SU-2024:10814-1 |
| openSUSE Leap 15.3 | ansible | 2.9.21-1.5.1 | openSUSE-SU-2021:2675-1 |
| openSUSE Leap 15.3 | dracut-saltboot | 0.1.1627546504.96a0b3e-1.27.1 | openSUSE-SU-2021:2675-1 |
| openSUSE Leap 15.3 | golang-github-prometheus-prometheus | 2.27.1-3.8.1 | openSUSE-SU-2021:2664-1 |
| openSUSE Leap 15.3 | mgr-cfg | 4.2.3-1.18.1 | openSUSE-SU-2021:2675-1 |
| openSUSE Leap 15.3 | mgr-custom-info | 4.2.2-1.12.1 | openSUSE-SU-2021:2675-1 |
| openSUSE Leap 15.3 | mgr-osad | 4.2.6-1.30.1 | openSUSE-SU-2021:2675-1 |
| openSUSE Leap 15.3 | mgr-push | 4.2.3-1.12.1 | openSUSE-SU-2021:2675-1 |
| openSUSE Leap 15.3 | mgr-virtualization | 4.2.2-1.20.1 | openSUSE-SU-2021:2675-1 |
| openSUSE Leap 15.3 | rhnlib | 4.2.4-3.28.1 | openSUSE-SU-2021:2675-1 |
| openSUSE Leap 15.3 | spacecmd | 4.2.11-3.62.1 | openSUSE-SU-2021:2675-1 |
| openSUSE Leap 15.3 | spacewalk-client-tools | 4.2.12-3.44.1 | openSUSE-SU-2021:2675-1 |
| openSUSE Leap 15.3 | spacewalk-koan | 4.2.4-3.21.1 | openSUSE-SU-2021:2675-1 |
| openSUSE Leap 15.3 | spacewalk-oscap | 4.2.2-3.12.1 | openSUSE-SU-2021:2675-1 |
| openSUSE Leap 15.3 | suseRegisterInfo | 4.2.4-3.15.1 | openSUSE-SU-2021:2675-1 |
| openSUSE Leap 15.3 | uyuni-common-libs | 4.2.5-1.15.1 | openSUSE-SU-2021:2675-1 |
| openSUSE Leap 15.2 | ansible | 2.9.21-lp152.2.7.1 | openSUSE-SU-2021:1162-1 |
| openSUSE Leap 15.2 | dracut-saltboot | 0.1.1627546504.96a0b3e-lp152.2.26.1 | openSUSE-SU-2021:1162-1 |
| openSUSE Leap 15.2 | golang-github-prometheus-prometheus | 2.27.1-lp152.3.13.1 | openSUSE-SU-2021:1162-1 |
Alpine
Security tracker ↗| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.24 | prometheus | 2.27.1-r0 | — |
| Alpine v3.23 | prometheus | 2.27.1-r0 | — |
| Alpine v3.22 | prometheus | 2.27.1-r0 | — |
| Alpine v3.21 | prometheus | 2.27.1-r0 | — |
| Alpine v3.20 | prometheus | 2.27.1-r0 | — |
Show 6 more (older releases, extended support, other products)Fewer releases
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Alpine v3.19 | prometheus | 2.27.1-r0 | — |
| Alpine v3.18 | prometheus | 2.27.1-r0 | — |
| Alpine v3.17 | prometheus | 2.27.1-r0 | — |
| Alpine v3.16 | prometheus | 2.27.1-r0 | — |
| Alpine v3.15 | prometheus | 2.27.1-r0 | — |
| Alpine v3.14 | prometheus | 2.27.1-r0 | — |
Azure Linux
| Release | Package | Fixed in | Advisory |
|---|---|---|---|
| Azure Linux 2 (CBL-Mariner) | prometheus | 2.36.0-2 | — |
Automated scanner template
A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.
- Prometheus - Open Redirect http/cves/2021/CVE-2021-29622.yaml
Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.
Advisories 7
- openSUSE-SU-2021:2664-1 Security update for golang-github-prometheus-prometheus SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2021:2675-1 Security update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:2675-1 Security update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:2673-1 Security update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2021:1162-1 Security update for SUSE Manager Client Tools SUSE / openSUSE Security Updates · Feb 4, 2026
- SUSE-SU-2021:2664-1 Security update for golang-github-prometheus-prometheus SUSE / openSUSE Security Updates · Feb 4, 2026
- openSUSE-SU-2024:10814-1 golang-github-prometheus-prometheus-2.27.1-4.2 on GA media SUSE / openSUSE Security Updates · May 7, 2025