CVE-2025-6023
Severity CVSS v4.0:
Pending analysis
Type:
CWE-79
Cross-Site Scripting (XSS)
Publication date:
18/07/2025
Last modified:
22/07/2025
Description
An open redirect vulnerability has been identified in Grafana OSS that can be exploited to achieve XSS attacks. The vulnerability was introduced in Grafana v11.5.0.<br />
<br />
The open redirect can be chained with path traversal vulnerabilities to achieve XSS.<br />
<br />
Fixed in versions 12.0.2+security-01, 11.6.3+security-01, 11.5.6+security-01, 11.4.6+security-01 and 11.3.8+security-01
Impact
Base Score 3.x
7.60
Severity 3.x
HIGH