Description
Prometheus is a monitoring system and time series database
Acunetix determined that it was possible to access without authentication a web application's metrics exposed for Prometheus.
Remediation
Restrict access to metrics
References
Related Vulnerabilities
WordPress Plugin WP Import Export Information Disclosure (3.9.15)
GraphQL Array-based Query Batching Allowed: Potential Batching Attack Vulnerability
WordPress Plugin Customer Reviews for WooCommerce Multiple Vulnerabilities (5.3.5)
WordPress Plugin Advanced File Manager Information Disclosure (5.2.4)
WordPress Plugin Media Library Assistant Information Disclosure (3.00)