Prometheus 输入验证错误漏洞

漏洞信息详情

Prometheus是一款使用Go语言编写的、用于记录使用HTTP拉模型构建的时间序列数据库中实时指标的开源软件。

Prometheus 存在输入验证错误漏洞，攻击者可利用该漏洞重定向到任何其他URL。

目前厂商已发布升级补丁以修复漏洞，补丁获取链接：

https://github.com/prometheus/prometheus/security/advisories/GHSA-vx57-7f4q-fpc7

来源:CONFIRM

链接:https://github.com/prometheus/prometheus/security/advisories/GHSA-vx57-7f4q-fpc7

来源:MISC

链接:https://github.com/prometheus/prometheus/releases/tag/v2.26.1

来源:MISC

链接:https://github.com/prometheus/prometheus/releases/tag/v2.27.1

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021052521

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.2555

来源:www.cybersecurity-help.cz

链接:https://www.cybersecurity-help.cz/vdb/SB2021051910

来源:www.auscert.org.au

链接:https://www.auscert.org.au/bulletins/ESB-2021.2746

来源:vigilance.fr

链接:https://vigilance.fr/vulnerability/Prometheus-open-redirect-via-new-Endpoint-36129

暂无