ALT-PU-2019-1352: package prometheus update to version 2.7.2-alt1
Описание
This update upgrades prometheus to version 2.7.2-alt1.
Устраненные уязвимости1
Связанные уязвимости
A stored, DOM based, cross-site scripting (XSS) flaw was found in Prometheus before version 2.7.1. An attacker could exploit this by convincing an authenticated user to visit a crafted URL on a Prometheus server, allowing for the execution and persistent storage of arbitrary scripts.
A stored, DOM based, cross-site scripting (XSS) flaw was found in Prometheus before version 2.7.1. An attacker could exploit this by convincing an authenticated user to visit a crafted URL on a Prometheus server, allowing for the execution and persistent storage of arbitrary scripts.
A stored, DOM based, cross-site scripting (XSS) flaw was found in Prometheus before version 2.7.1. An attacker could exploit this by convincing an authenticated user to visit a crafted URL on a Prometheus server, allowing for the execution and persistent storage of arbitrary scripts.
A stored, DOM based, cross-site scripting (XSS) flaw was found in Prom ...
Withdrawn Advisory: Prometheus XSS Vulnerability