CyberRota Analysis
AI-GeneratedThe alertmanager templates test endpoint in Grafana is vulnerable to mass template execution, which can lead to out-of-memory (OOM) conditions and crash the service. This issue can be exploited with minimal privileges, particularly if anonymous access is enabled, making it a concern for organizations using Grafana in environments where such access is permitted. Administrators should prioritize addressing this vulnerability to prevent potential service disruptions.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
The alertmanager templates test endpoint (/api/alertmanager/grafana/config/api/v1/templates/test) can execute templates with no memory limits. Mass-executing templates in a short period causes OOM and crashes the Grafana service. The endpoint requires very low privileges and is exploitable with anonymous access enabled.