basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f disables Rails CSRF protection for its Alertmanager and Prometheus proxy controllers. An unauthenticated attacker can induce a logged-in user's browser to submit requests that are forwarded to enabled upstream write or management endpoints, such as creating an Alertmanager silence or requesting a Prometheus reload. The final impact depends on the APIs enabled by the upstream services.
Attack Parameters
Attack Vector
Network
Can be exploited remotely
Attack Complexity
Low
Easy to exploit
Privileges Required
None
No privileges needed
User Interaction
Required
User action required
Impact Assessment
Confidentiality
Low
Partial data leak
Integrity
Low
Partial data modification
Availability
None
No disruption
CVSS Vector v3.1
Weakness Type (CWE)
References 4
https://gist.github.com/Zykis1024/cec690012eecac53f408e78d2b569f06
cve@mitre.org
https://github.com/basecamp/upright
cve@mitre.org
https://github.com/basecamp/upright/blob/efe4f2e5254ac6e57e45d2261804cca74dbbca…
cve@mitre.org
https://github.com/basecamp/upright/blob/efe4f2e5254ac6e57e45d2261804cca74dbbca…
cve@mitre.org