Log in / Sign up

Vulnerability details

CVE-2025-4123

Grafana Grafana
CVSS 3.1
7.6High

Official description

A cross-site scripting (XSS) vulnerability exists in Grafana caused by combining a client path traversal and open redirect. This allows attackers to redirect users to a website that hosts a frontend plugin that will execute arbitrary JavaScript. This vulnerability does not require editor permissions and if anonymous access is enabled, the XSS will work. If the Grafana Image Renderer plugin is installed, it is possible to exploit the open redirect to achieve a full read SSRF. The default Content-Security-Policy (CSP) in Grafana will block the XSS though the `connect-src` directive.

CVSS scores

ScoreVersionSourceVector
7.6High 3.1 CVEProject cvelistV5 (CNA) (GRAFANA) CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L

Affected products

VendorProductVersionsSource
Grafana Grafana 10.4.18+security-01 ≤ v < 10.4.19 CVEProject cvelistV5 (CNA)
Grafana Grafana 11.2.9+security-01 ≤ v < 11.2.10 CVEProject cvelistV5 (CNA)
Grafana Grafana 11.3.6+security-01 ≤ v < 11.3.7 CVEProject cvelistV5 (CNA)
Grafana Grafana 11.4.4+security-01 ≤ v < 11.4.5 CVEProject cvelistV5 (CNA)
Grafana Grafana 11.5.4+security-01 ≤ v < 11.5.5 CVEProject cvelistV5 (CNA)
Grafana Grafana 11.6.1+security-01 ≤ v < 11.6.2 CVEProject cvelistV5 (CNA)
Grafana Grafana 12.0.0+security-01 ≤ v < 12.0.1 CVEProject cvelistV5 (CNA)

References and advisories

3
Kolun on Telegram @kolunsec Exploited CVEs, key news and a daily digest Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.

Details

Published
2025-05-22
Last updated
2026-04-29
State
Published
Assigner (CNA)
GRAFANA

Exploit prediction (EPSS)

97.08%
Probability of exploitation in 30 days
99.8%
Percentile (among all CVEs)

SSVC assessment (CISA)

Automatable
No
Exploitation
None
Technical impact
Partial

Weaknesses (CWE)

  • CWE-79
  • CWE-601