prometheus vulnerabilities (Ubuntu)
7 vulnerabilities.
-
prometheusUbuntu Prometheus: Stored XSS via crafted histogram bucket label values in the heatmap display of the old Prometheus web UI 5.1 Medium -
prometheusUbuntu Prometheus: remote read endpoint allows denial of service via crafted snappy payload 7.5 High -
prometheusUbuntu Prometheus Azure AD remote write OAuth client secret exposed via config API 7.5 High -
prometheusUbuntu Prometheus: Stored XSS via metric names and label values in web UI tooltips and metrics explorer 5.3 Medium -
prometheusUbuntu Prometheus Exporter Toolkit vulnerable to basic authentication bypass 6.2 Medium -
prometheusUbuntu Arbitrary redirects under /new endpoint 6.5 Medium -
prometheusUbuntu Withdrawn Advisory: Prometheus XSS Vulnerability 6.1 Medium