CVEvulnerability

CVE-2025-4123

6.1 MEDIUM Published 2025-05-22 Modified 2026-06-17 Official page ↗
Status
Modified
Published
2025-05-22
Last modified
2026-06-17
Assigner
[email protected]
CVSS 3.1 ([email protected])
7.6 HIGH — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
CVSS 3.1 ([email protected])
6.1 MEDIUM — CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:L/I:L/A:N
Weaknesses
CWE-601, CWE-79

Description

A cross-site scripting (XSS) vulnerability exists in Grafana caused by combining a client path traversal and open redirect. This allows attackers to redirect users to a website that hosts a frontend plugin that will execute arbitrary JavaScript. This vulnerability does not require editor permissions and if anonymous access is enabled, the XSS will work. If the Grafana Image Renderer plugin is installed, it is possible to exploit the open redirect to achieve a full read SSRF. The default Content-Security-Policy (CSP) in Grafana will block the XSS though the `connect-src` directive.

Affected configurations

• grafana grafana (< 10.4.18) • grafana grafana (>= 11.2.0 < 11.2.9) • grafana grafana (>= 11.3.0 < 11.3.6) • grafana grafana (>= 11.4.0 < 11.4.4) • grafana grafana (>= 11.5.0 < 11.5.4) • grafana grafana (>= 11.6.0 < 11.6.1) • grafana grafana 10.4.18 • grafana grafana 11.2.9 • grafana grafana 11.3.6 • grafana grafana 11.4.4 • grafana grafana 11.5.4 • grafana grafana 11.6.1 • grafana grafana 12.0.0

Related

Weakness · CWE (2)

  • CWE-601 URL Redirection to Untrusted Site weakness
  • CWE-79 Improper Neutralization of Input During Web Page Generation weakness

References