CVE-2025-6023
High · 7.6CVSS
7.6
EPSS
57.7%
Published
Jul 18, 2025
CISA due date
—
The record
An open redirect vulnerability has been identified in Grafana OSS that can be exploited to achieve XSS attacks. The vulnerability was introduced in Grafana v11.5.0. The open redirect can be chained with path traversal vulnerabilities to achieve XSS. Fixed in versions 12.0.2+security-01, 11.6.3+security-01, 11.5.6+security-01, 11.4.6+security-01 and 11.3.8+security-01
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| Go | github.com/grafana/grafana | 0 | No fix |
| Go | github.com/grafana/grafana | 0 | 1.9.2-0.20250521205822-0ba0b99665a9 |
| Bitnami | grafana | 11.3.0 | 11.6.3 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP6 | grafana | 0 | 11.5.10-150200.3.80.1 |
| SUSE:Linux Enterprise Module for Package Hub 15 SP7 | grafana | 0 | 11.5.10-150200.3.80.1 |
| SUSE:Manager Client Tools 15 | dracut-saltboot | 0 | 1.0.0-150000.1.62.1 |
| SUSE:Manager Client Tools 15 | grafana | 0 | 11.5.10-150000.1.87.1 |
| SUSE:Manager Client Tools 15 | mgr-push | 0 | 5.0.3-150000.1.30.1 |
| SUSE:Manager Client Tools 15 | rhnlib | 0 | 5.0.6-150000.3.49.1 |
| SUSE:Manager Client Tools 15 | spacecmd | 0 | 5.0.14-150000.3.139.1 |
| SUSE:Manager Client Tools 15 | supportutils-plugin-susemanager-client | 0 | 5.0.5-150000.3.30.1 |
| SUSE:Manager Client Tools 15 | uyuni-tools | 0 | 0.1.37-150000.1.27.1 |
| SUSE:Manager Client Tools for SLE Micro 5 | dracut-saltboot | 0 | 1.0.0-150000.1.62.1 |
| SUSE:Manager Client Tools for SLE Micro 5 | uyuni-tools | 0 | 0.1.37-150000.1.27.1 |
| SUSE:Multi Linux Manager Tools SLE-12 | Multi-Linux-ManagerTools-SLE-release | 0 | 12-120002.1.3.2 |
| SUSE:Multi Linux Manager Tools SLE-12 | golang-github-prometheus-alertmanager | 0 | 0.28.1-120002.4.3.2 |
| SUSE:Multi Linux Manager Tools SLE-12 | grafana | 0 | 11.5.7-120002.4.3.2 |
| SUSE:Multi Linux Manager Tools SLE-12 | mgr-push | 0 | 5.1.4-120002.3.3.3 |
| SUSE:Multi Linux Manager Tools SLE-12 | python-defusedxml | 0 | 0.6.0-120002.1.3.1 |
| SUSE:Multi Linux Manager Tools SLE-12 | rhnlib | 0 | 5.1.3-120002.3.3.1 |
| SUSE:Multi Linux Manager Tools SLE-12 | spacecmd | 0 | 5.1.11-120002.3.3.2 |
| SUSE:Multi Linux Manager Tools SLE-12 | spacewalk-client-tools | 0 | 5.1.7-120002.3.3.2 |
| SUSE:Multi Linux Manager Tools SLE-12 | supportutils-plugin-susemanager-client | 0 | 5.1.4-120002.3.3.1 |
| SUSE:Multi Linux Manager Tools SLE-15 | dracut-saltboot | 0 | 1.0.0-150002.3.3.1 |
| SUSE:Multi Linux Manager Tools SLE-15 | golang-github-prometheus-alertmanager | 0 | 0.28.1-150002.4.3.3 |
| SUSE:Multi Linux Manager Tools SLE-15 | grafana | 0 | 11.5.7-150002.4.3.3 |
| SUSE:Multi Linux Manager Tools SLE-15 | mgr-push | 0 | 5.1.4-150002.3.3.3 |
| SUSE:Multi Linux Manager Tools SLE-15 | python-defusedxml | 0 | 0.7.1-150002.1.3.2 |
| SUSE:Multi Linux Manager Tools SLE-15 | rhnlib | 0 | 5.1.3-150002.3.3.2 |
| SUSE:Multi Linux Manager Tools SLE-15 | spacecmd | 0 | 5.1.11-150002.3.3.2 |
| SUSE:Multi Linux Manager Tools SLE-15 | spacewalk-client-tools | 0 | 5.1.7-150002.3.3.3 |
| SUSE:Multi Linux Manager Tools SLE-15 | supportutils-plugin-susemanager-client | 0 | 5.1.4-150002.3.3.2 |
| SUSE:Multi Linux Manager Tools SLE-15 | uyuni-tools | 0 | 5.1.20-150002.3.3.3 |
| SUSE:Multi Linux Manager Tools SLE-Micro-5 | dracut-saltboot | 0 | 1.0.0-150002.3.3.1 |
| SUSE:Multi Linux Manager Tools SLE-Micro-5 | uyuni-tools | 0 | 5.1.20-150002.3.3.3 |
| openSUSE:Leap 15.6 | dracut-saltboot | 0 | 1.0.0-150000.1.62.1 |
| openSUSE:Leap 15.6 | grafana | 0 | 11.5.10-150200.3.80.1 |
| openSUSE:Leap 15.6 | spacecmd | 0 | 5.0.14-150000.3.139.1 |
| openSUSE:Leap 15.6 | supportutils-plugin-susemanager-client | 0 | 5.0.5-150000.3.30.1 |
| openSUSE:Tumbleweed | govulncheck-vulndb | 0 | 0.0.20250730T213748-1.1 |
| openSUSE:Tumbleweed | grafana | 0 | 11.6.3+security01-1.1 |
Related vulnerabilities
- CVE-2025-41115 Grafana Incorrect Privilege Assignment vulnerability Also affects github.com/grafana/grafana
- CVE-2025-4123 A cross-site scripting (XSS) vulnerability exists in Grafana caused by combining a client… Also affects github.com/grafana/grafana
- CVE-2024-10452 Grafana org admin can delete pending invites in different org Also affects github.com/grafana/grafana
- CVE-2024-9264 Grafana Command Injection And Local File Inclusion Via Sql Expressions Also affects github.com/grafana/grafana
- CVE-2024-6322 Access control for plugin data sources protected by the ReqActions json field of the… Also affects github.com/grafana/grafana
- CVE-2024-1313 It is possible for a user in a different organization from the owner of a snapshot to… Also affects github.com/grafana/grafana
- CVE-2024-1442 A user with the permissions to create a data source can use Grafana API to create a data… Also affects github.com/grafana/grafana
- CVE-2023-6152 A user changing their email after signing up and verifying it can change it without… Also affects github.com/grafana/grafana