GHSA-3m87-5598-2v4f
GitHub Security Advisory
Withdrawn Advisory: Prometheus XSS Vulnerability
✓ GitHub Reviewed
MODERATE
Withdrawn
Has CVE
Advisory Details
## Withdrawn Advisory
This advisory has been withdrawn because the vulnerability does not apply to the Prometheus golang package. This link is maintained to preserve external references.
## Original Description
A stored, DOM based, cross-site scripting (XSS) flaw was found in Prometheus before version 2.7.1. An attacker could exploit this by convincing an authenticated user to visit a crafted URL on a Prometheus server, allowing for the execution and persistent storage of arbitrary scripts.
Affected Packages
Go
github.com/prometheus/prometheus
Affected versions:
0
(fixed in 2.7.1)
Related CVEs
Key Information
5.0
/10
Dataset
Last updated: September 14, 2025 6:31 AM
Data from GitHub Advisory Database. This information is provided for research and educational purposes.