Prometheus 输入验证错误漏洞

Description

PoC

None yet. Search at https://trap.biu.life/?ref=rss

References

• https://avd.aliyun.com/detail?id=AVD-2021-29622
• https://cve.imfht.com/poc_detail/7526521f5fe7f4d83a69621484ccd8df5e1ee3a8
• https://blog.nsfocus.net/prometheus-4/
• https://app.opencve.io/cve/?vendor=prometheus
• https://avd.aliyun.com/detail?id=AVD-2021-29622

Related Vulnerabilities

• PoCCVE-2020-16248: Prometheus Blackbox Exporter - Server-Side Request Forgery (SSRF)
• PoCCVE-2021-29622: Prometheus - Open Redirect
• PoCCVE-2021-29622: Prometheus v2.23.0 to v2.26.0, and v2.27.0 Open Redirect
• PoCprometheus-metrics: Prometheus Metrics - Detect
• PoCprometheus-promtail: Prometheus Promtail - Exposure
• PoCprometheus-log: Exposed Prometheus
• PoCprometheus-unauth: Prometheus Monitoring System - Unauthenticated
• PoCthanos-prometheus-exposure: Thanos Prometheus Setup - Exposure
• Prometheus集群运维监控系统Agent端远程命令执行漏洞
• Prometheus Time Series Collection and Processing Server信息泄露
• Prometheus 未授权访问