Debian/prometheus-alertmanager: medium 5.4
Alertmanager handles alerts sent by client applications such as the Prometheus server. An attacker with the permission to perform POST requests on the /api/v1/alerts endpoint could be able to execute
Action: Upgrade prometheus-alertmanager to 0.26.0+ds-1 or later.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | 0.26.0+ds-1 | - |
Fixed versions
| 0.26.0+ds-1 |
Sources
- osv: DEBIAN-CVE-2023-40577#Debian:13/prometheus-alertmanager
- https://security-tracker.debian.org/tracker/CVE-2023-40577
published · modified · JSON