Executive brief
Withdrawn Advisory: Prometheus XSS Vulnerability
Affected products
- Go github.com/prometheus/prometheus
Junglewise Threat Intelligence
CVE-2019-3826: Withdrawn Advisory: Prometheus XSS Vulnerability
CVE-2019-3826 · Severity: low · CVSS 3.1 · Published 2023-12-13
Technologies: github.com/prometheus/prometheus (Go). Vendors: Go.
Related threats
- Prometheus stored XSS in legacy web UI heatmap chart
- Prometheus denial of service via memory exhaustion in remote read endpoint
- Prometheus information disclosure in Azure AD OAuth configuration
- Prometheus has Stored XSS via metric names and label values in Prometheus web UI tooltips and metrics explorer