CVE-2021-29622

MEDIUMNuclei

Arbitrary redirects under /new endpoint

Title source: CVE List
STIX 2.1 vulnerability

Record summary

CVE-2021-29622 has a selected CVSS score of 6.5 (medium); EIP currently links 1 Nuclei template.

Description

Prometheus is an open-source monitoring system and time series database. In 2.23.0, Prometheus changed its default UI to the New ui. To ensure a seamless transition, the URL's prefixed by /new redirect to /. Due to a bug in the code, it is possible for an attacker to craft an URL that can redirect to any other URL, in the /new endpoint. If a user visits a prometheus server with a specially crafted address, they can be redirected to an arbitrary URL. The issue was patched in the 2.26.1 and 2.27.1 releases. In 2.28.0, the /new endpoint will be removed completely. The workaround is to disable access to /new via a reverse proxy in front of Prometheus.

Description source: CVE List

Exploitation context

Available material

Nuclei templates
1

Affected products and versions

1
ProductSourceVersion range

prometheus

Browse prometheus / prometheus
CVE List>= 2.23.0, < 2.27.1affected

Nuclei templates

1
ProjectDiscoveryMEDIUMPrometheus - Open RedirectCVSS 6.1

Prometheus 2.23.0 through 2.26.0 and 2.27.0 contains an open redirect vulnerability. To ensure a seamless transition to 2.27.0, the default UI was changed to the new UI with a URL prefixed by /new redirect to /. Due to a bug in the code, an attacker can redirect a user to a malicious site and possibly obtain sensitive information, modify data, and/or execute unauthorized operations.

Impact

An attacker can exploit this vulnerability to redirect users to malicious websites, leading to potential phishing attacks or the disclosure of sensitive information.

Remediation

The issue was patched in the 2.26.1 and 2.27.1 releases. In 2.28.0, the /new endpoint will be removed completely. The workaround is to disable access to /new via a reverse proxy in front of Prometheus.

WeaknessesCWE-601
Authorsgeeknik
Template tagscve2021cveprometheusredirectvuln
CVSS vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
CPE: cpe:2.3:a:prometheus:prometheus:*:*:*:*:*:*:*:*
https://github.com/prometheus/prometheus/security/advisories/GHSA-vx57-7f4q-fpc7 https://github.com/prometheus/prometheus/releases/tag/v2.26.1 https://github.com/prometheus/prometheus/releases/tag/v2.27.1 https://nvd.nist.gov/vuln/detail/CVE-2021-29622 https://github.com/d4n-sec/d4n-sec.github.io

Source: ProjectDiscovery

References

3