CyberRota Analysis
AI-GeneratedThe vulnerability affects the Alertmanager and Prometheus proxy controllers in the basecamp/upright project, where Rails CSRF protection is disabled. This allows unauthenticated attackers to trick a logged-in user's browser into making unauthorized requests to upstream management endpoints, potentially leading to actions like creating silences in Alertmanager or triggering Prometheus reloads. Organizations using these services should prioritize addressing this issue to mitigate the risk of unauthorized actions on their monitoring infrastructure.
Public Exploit Signal
A public exploit, PoC, GitHub repository or Metasploit reference was detected for this CVE.
Note: these links are listed for security research and verification purposes only.
Original NVD Description
basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f disables Rails CSRF protection for its Alertmanager and Prometheus proxy controllers. An unauthenticated attacker can induce a logged-in user's browser to submit requests that are forwarded to enabled upstream write or management endpoints, such as creating an Alertmanager silence or requesting a Prometheus reload. The final impact depends on the APIs enabled by the upstream services.