RHEL 8 : grafana (RHSA-2025:8683)

The remote Redhat Enterprise Linux 8 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:8683 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: grafana: Cross-site...

RHEL 9 : grafana (RHSA-2025:8681)

The remote Redhat Enterprise Linux 9 host has a package installed that is affected by a vulnerability as referenced in the RHSA-2025:8681 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: grafana: Cross-site...

Security update for grafana

This update for grafana fixes the following issues: grafana was updated from version 10.4.15 to 11.5.5 jscPED-12918: Security issues fixed: CVE-2025-4123: Fix cross-site scripting vulnerability bsc1243714. CVE-2025-22872: Bump golang.org/x/net/html bsc1241809 CVE-2025-3580: Prevent unauthorized...

RHEL 9 : grafana (RHSA-2025:8665)

The remote Redhat Enterprise Linux 9 host has packages installed that are affected by multiple vulnerabilities as referenced in the RHSA-2025:8665 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: net/http:...

Exploit for Open Redirect in Grafana

Blackash-CVE-2025-4123 CVE-2025-4123 CVE ID: "CVE-2025-4123"...

RHEL 10 : grafana (RHSA-2025:7892)

The remote Redhat Enterprise Linux 10 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:7892 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: grafana: Cross-site...

Exploit for Open Redirect in Grafana

CVE-2025-4123 - Grafana Path Traversal Exploit Developed by...

CVE-2025-4123 vulnerabilities

Vulnerabilities for packages: grafana-fips...

Alibaba Cloud Linux 3 : 0074: grafana (ALINUX3-SA-2025:0074)

The remote Alibaba Cloud Linux 3 host has packages installed that are affected by a vulnerability as referenced in the ALINUX3-SA-2025:0074 advisory. Package updates are available for Alibaba Cloud Linux 3 that fix the following vulnerabilities: CVE-2025-4123: A flaw was found in Grafana's custom...

RHEL 8 : grafana (RHSA-2025:7894)

The remote Redhat Enterprise Linux 8 host has packages installed that are affected by a vulnerability as referenced in the RHSA-2025:7894 advisory. Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fixes: grafana: Cross-site...

AlmaLinux 9 : grafana (ALSA-2025:7893)

The remote AlmaLinux 9 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:7893 advisory. grafana: Cross-site Scripting XSS in Grafana via Custom Frontend Plugins and Open Redirect CVE-2025-4123 Tenable has extracted the preceding description block...

Oracle Linux 9 : grafana (ELSA-2025-7893)

The remote Oracle Linux 9 host has packages installed that are affected by a vulnerability as referenced in the ELSA-2025-7893 advisory. - Resolves RHEL-89954: CVE-2025-4123 - Resolves RHEL-84636: CVE-2025-30204 Tenable has extracted the preceding description block directly from the Oracle Linux...

CVE-2021-4123

livehelperchat is vulnerable to Cross-Site Request Forgery CSRF...

CVE-2025-4123

creationtimestamp| type| source ---|---|--- 2025-05-22 08:43:09+00:00| seen| https://t.me/DarkWebInformerCVEAlerts/17258 2025-05-22 09:09:51+00:00| seen| https://bsky.app/profile/securitycipher.bsky.social/post/3lpqrg2ydr52j 2025-05-22 09:58:31+00:00| confirmed|...

CVE-2025-4123

Grafana OSS is affected by CVE-2025-4123, a cross-site scripting (XSS) flaw caused by a combination of client path traversal and an open redirect. The issue does not require editor permissions; it can be triggered when anonymous access is enabled, causing arbitrary JavaScript execution in the use...

CVE-2025-4123

A cross-site scripting XSS vulnerability exists in Grafana caused by combining a client path traversal and open redirect. This allows attackers to redirect users to a website that hosts a frontend plugin that will execute arbitrary JavaScript. This vulnerability does not require editor permission...

AlmaLinux 8 : grafana (ALSA-2025:7894)

The remote AlmaLinux 8 host has packages installed that are affected by a vulnerability as referenced in the ALSA-2025:7894 advisory. grafana: Cross-site Scripting XSS in Grafana via Custom Frontend Plugins and Open Redirect CVE-2025-4123 Tenable has extracted the preceding description block...

Important: Red Hat Security Advisory: grafana security update

An update for grafana is now available for Red Hat Enterprise Linux 9. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Important: Red Hat Security Advisory: grafana security update

An update for grafana is now available for Red Hat Enterprise Linux 8. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from t...

Important: Red Hat Security Advisory: grafana security update

An update for grafana is now available for Red Hat Enterprise Linux 10. Red Hat Product Security has rated this update as having a security impact of Important. A Common Vulnerability Scoring System CVSS base score, which gives a detailed severity rating, is available for each vulnerability from...