Open Redirect

🗓️ 22 Jul 2025 08:54:42Reported by Veracode Vulnerability DatabaseType

Grafana has an open redirect vulnerability allowing cross-site scripting attacks due to improper URL validation.

Reporter	Title	Published	Views	Family All 69
AlpineLinux	CVE-2025-6023	18 Jul 202508:15	–	alpinelinux
AlpineLinux	CVE-2025-6197	18 Jul 202508:15	–	alpinelinux
Circl	CVE-2025-6023	18 Jul 202513:19	–	circl
CNNVD	Grafana OSS 安全漏洞	18 Jul 202500:00	–	cnnvd
CVE	CVE-2025-6023	18 Jul 202507:48	–	cve
Cvelist	CVE-2025-6023	18 Jul 202507:48	–	cvelist
EUVD	EUVD-2025-21861	3 Oct 202520:07	–	euvd
EUVD	EUVD-2025-21862	3 Oct 202520:07	–	euvd
Github Security Blog	Grafana is vulnerable to XSS attacks through open redirects and path traversal	18 Jul 202509:30	–	github
Grafana	Grafana Cross-Site-Scripting (XSS) via scripted dashboards	18 Jul 202500:00	–	grafana

Vulners

Node

grafana github.com/grafana/grafanaRangev12.0.0+security-01–v12.0.1go

grafana github.com/grafana/grafanaRangev11.6.0+security-01–v11.6.2go

grafana github.com/grafana/grafanaRange11.3.0+security-01–11.3.7go

Source	Link
github	www.github.com/grafana/grafana/commit/b6dd2b70c655c61b111b328f1a7dcca6b3954936
github	www.github.com/grafana/grafana/commit/40ed88fe86d347bcde5ddaed6c4a20a95d2f0d55
github	www.github.com/grafana/grafana/commit/e0ba4b480954f8a33aa2cff3229f6bcc05777bd9
github	www.github.com/grafana/grafana/commit/5b00e21638f565eed46acb4d0b7c009968df4c3b
github	www.github.com/grafana/grafana/commit/0ba0b99665a946cd96676ef85ec8bc83028cb1d7
github	www.github.com/advisories/GHSA-vqph-p5vc-g644
grafana	www.grafana.com/security/security-advisories/cve-2025-6023/
grafana	www.grafana.com/blog/2025/07/17/grafana-security-release-medium-and-high-severity-fixes-for-cve-2025-6197-and-cve-2025-6023/

24 Jul 2025 23:28Current

6Medium risk

Vulners AI Score6

CVSS 3.17.6

EPSS0.07087

SSVC