PT-2023-9332 · Unknown+6 · Alertmanager+6

Oxeye-Daniel + 1 · Published 2023-08-23 · Updated 2024-11-08 · CVE-2023-40577

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Alertmanager versions prior to 0.2.51

Description The issue is related to the improper neutralization of input data during web page generation in the /api/v1/alerts endpoint of the Alertmanager component in the Prometheus monitoring system. An attacker with permission to perform POST requests on the /api/v1/alerts endpoint could execute arbitrary JavaScript code on the users of Prometheus Alertmanager.

Recommendations For versions prior to 0.2.51, upgrade to Alertmanager version 0.2.51. As a temporary workaround, consider setting up a reverse proxy in front of the Alertmanager web server to forbid access to the /api/v1/alerts endpoint.

Exploit

Fix

XSS

Weakness Enumeration

CWE-79

Related Identifiers

ALT-PU-2023-8410

BDU:2024-06600

BIT-ALERTMANAGER-2023-40577

CVE-2023-40577

DLA-3609-1

ECHO-C766-677F-419D

GHSA-V86X-5FM3-5P7J

GO-2023-2020

OPENSUSE-SU-2024:13599-1

OPENSUSE-SU-2024_0512-1

SUSE-SU-2024:0191-1

SUSE-SU-2024:0486-1

SUSE-SU-2024:0512-1

USN-6935-1

Affected Products

Alt Linux

Alertmanager

Debian

Linuxmint

Red Os

Suse

Ubuntu

References · 154

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2023/40xxx/CVE-2023-40577.json · Exploit
• https://github.com/prometheus/alertmanager/security/advisories/GHSA-v86x-5fm3-5p7j · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2023-40577 · Security Note
• https://osv.dev/vulnerability/BIT-alertmanager-2023-40577 · Vendor Advisory
• https://cve.org/CVERecord?id=CVE-2023-40577 · Security Note
• https://ubuntu.com/security/notices/USN-6935-1 · Vendor Advisory
• https://osv.dev/vulnerability/DLA-3609-1 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-v86x-5fm3-5p7j · Vendor Advisory
• https://osv.dev/vulnerability/USN-6935-1 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2024:13599-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2023-40577 · Vendor Advisory
• https://ubuntu.com/security/CVE-2023-40577 · Vendor Advisory
• https://osv.dev/vulnerability/DEBIAN-CVE-2023-40577 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:0486-1 · Vendor Advisory
• https://osv.dev/vulnerability/SUSE-SU-2024:0512-1 · Vendor Advisory