GO-2023-2020: Alertmanager UI is vulnerable to stored XSS via the /api/v1/alerts endpoint in github.com/prometheus/alertmanager

v2

package

v0.16.0 Latest Latest Go to latest Published: Jan 21, 2019 License: Apache-2.0 Imports: 30 Imported by: 8

Details

This section is empty.

This section is empty.

This section is empty.

type API struct {
	Handler http.Handler
	// contains filtered or unexported fields
}

API represents an Alertmanager API v2

func NewAPI(alerts provider.Alerts, sf getAlertStatusFn, silences *silence.Silences, peer *cluster.Peer, l log.Logger) (*API, error)

NewAPI returns a new Alertmanager API v2

func (api *API) Update(cfg *config.Config, resolveTimeout time.Duration) error

Update sets the configuration string to a new value.

Path	Synopsis
models
restapi Package restapi Alertmanager API API of the Prometheus Alertmanager (https://github.com/prometheus/alertmanager) Schemes: http Host: localhost BasePath: / Version: 0.0.1 License: Apache 2.0 http://www.apache.org/licenses/LICENSE-2.0.html Consumes: - application/json Produces: - application/json swagger:meta	Package restapi Alertmanager API API of the Prometheus Alertmanager (https://github.com/prometheus/alertmanager) Schemes: http Host: localhost BasePath: / Version: 0.0.1 License: Apache 2.0 http://www.apache.org/licenses/LICENSE-2.0.html Consumes: - application/json Produces: - application/json swagger:meta
operations
operations/alert
operations/general
operations/receiver
operations/silence