GHSA-q9r6-h8cx-q7qpMediumCVSS 5.4
basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f disables Rails CSRF...
🔗 CVE IDs covered (1)
📋 Description
basecamp/upright at commit efe4f2e5254ac6e57e45d2261804cca74dbbca3f disables Rails CSRF protection for its Alertmanager and Prometheus proxy controllers. An unauthenticated attacker can induce a logged-in user's browser to submit requests that are forwarded to enabled upstream write or management endpoints, such as creating an Alertmanager silence or requesting a Prometheus reload. The final impact depends on the APIs enabled by the upstream services.
🔗 References (6)
- https://nvd.nist.gov/vuln/detail/CVE-2026-67990
- https://gist.github.com/Zykis1024/cec690012eecac53f408e78d2b569f06
- https://github.com/basecamp/upright
- https://github.com/basecamp/upright/blob/efe4f2e5254ac6e57e45d2261804cca74dbbca3f/app/controllers/upright/alertmanager_proxy_controller.rb#L2
- https://github.com/basecamp/upright/blob/efe4f2e5254ac6e57e45d2261804cca74dbbca3f/app/controllers/upright/prometheus_proxy_controller.rb#L2
- https://github.com/advisories/GHSA-q9r6-h8cx-q7qp