TI-2023-21376 CVE-2023-40577 · GHSA-v86x-5fm3-5p7j
Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint
Priority MEDIUM 40
Alertmanager handles alerts sent by client applications such as the Prometheus server.
No prometheus vulnerabilities are listed in CISA KEV.
1 record in Alertmanager · all components
Alertmanager handles alerts sent by client applications such as the Prometheus server.