CVE-2021-29622
Arbitrary redirects under /new endpoint
Severity Score
Exploit Likelihood
Affected Versions
Public Exploits
0Exploited in Wild
-Decision
Descriptions
Prometheus is an open-source monitoring system and time series database. In 2.23.0, Prometheus changed its default UI to the New ui. To ensure a seamless transition, the URL's prefixed by /new redirect to /. Due to a bug in the code, it is possible for an attacker to craft an URL that can redirect to any other URL, in the /new endpoint. If a user visits a prometheus server with a specially crafted address, they can be redirected to an arbitrary URL. The issue was patched in the 2.26.1 and 2.27.1 releases. In 2.28.0, the /new endpoint will be removed completely. The workaround is to disable access to /new via a reverse proxy in front of Prometheus.
Prometheus es un sistema de monitoreo de código abierto y una base de datos de series de tiempo. En la versión 2.23.0, Prometheus cambió su Interfaz de Usuario predeterminada a la Nueva interfaz de usuario. Para garantizar una transición sin problemas, la URL con el prefijo /new redirecciona a /. Debido a un bug en el código, es posible para un atacante diseñar una URL que pueda redireccionar a cualquier otra URL, en el endpoint /new. Si un usuario visita un servidor de Prometheus con una dirección especialmente diseñada, ellos pueden ser redirigidos a una URL arbitraria. El problema fue parcheado en las versiones 2.26.1 y 2.27.1. En la versión 2.28.0, el endpoint /new será eliminado completamente. La solución es deshabilitar un acceso a /new por medio de un proxy inverso en frente de Prometheus
An open redirect vulnerability was found in Prometheus. By specially crafted URL and a /new endpoint, an attacker can redirect user to any other URL.
CVSS Scores
SSVC
- Decision:-
Timeline
- 2021-03-30 CVE Reserved
- 2021-05-19 CVE Published
- 2024-02-02 EPSS Updated
- 2024-08-03 CVE Updated
- ---------- Exploited in Wild
- ---------- KEV Due Date
- ---------- First Exploit
CWE
- CWE-601: URL Redirection to Untrusted Site ('Open Redirect')
CAPEC
References (5)
| URL | Tag | Source |
|---|---|---|
| https://github.com/prometheus/prometheus/releases/tag/v2.26.1 | Third Party Advisory | |
| https://github.com/prometheus/prometheus/releases/tag/v2.27.1 | Third Party Advisory | |
| https://github.com/prometheus/prometheus/security/advisories/GHSA-vx57-7f4q-fpc7 | Third Party Advisory |
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|
| URL | Date | SRC |
|---|---|---|
| https://access.redhat.com/security/cve/CVE-2021-29622 | 2021-07-27 | |
| https://bugzilla.redhat.com/show_bug.cgi?id=1962718 | 2021-07-27 |
Affected Vendors, Products, and Versions
| Vendor | Product | Version | Other | Status | ||||||
|---|---|---|---|---|---|---|---|---|---|---|
| Vendor | Product | Version | Other | Status | <-- --> | Vendor | Product | Version | Other | Status |
| Prometheus Search vendor "Prometheus" | Prometheus Search vendor "Prometheus" for product "Prometheus" | >= 2.23.0 < 2.26.1 Search vendor "Prometheus" for product "Prometheus" and version " >= 2.23.0 < 2.26.1" | - |
Affected
| ||||||
| Prometheus Search vendor "Prometheus" | Prometheus Search vendor "Prometheus" for product "Prometheus" | 2.27.0 Search vendor "Prometheus" for product "Prometheus" and version "2.27.0" | - |
Affected
| ||||||
| Prometheus Search vendor "Prometheus" | Prometheus Search vendor "Prometheus" for product "Prometheus" | 2.27.0 Search vendor "Prometheus" for product "Prometheus" and version "2.27.0" | rc0 |
Affected
| ||||||