/Vulnerability Library

Grafana - XSS / Open Redirect / SSRF via Client Path Traversal

CVE-2025-4123
Verified

Description

An open redirect vulnerability in Grafana can be chained with other issues, such as XSS or SSRF, to increase impact. An attacker may exploit the redirect to target internal services or deliver malicious JavaScript, potentially leading to internal data exposure or account takeover.

Severity

High

CVSS Score

7.6

Exploit Probability

97%

Published Date

May 22, 2025

Template Author

iamnoooob, rootxharsh, pdresearch

CVE-2025-4123.yaml
7.6Score

CVSS Metrics

CVSS Vector:
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
CVE ID:
cve-2025-4123
CWE ID:
cwe-79, cwe-601

References

https://medium.com/@Nightbloodz/grafana-cve-2025-4123-full-read-ssrf-account-takeover-d12abd13cd53https://grafana.com/blog/2025/05/21/grafana-security-release-high-severity-security-fix-for-cve-2025-4123/

Remediation Steps

Upgrade Grafana to the latest version that properly validates and sanitizes file paths in the render endpoint.