Executive brief
Grafana is vulnerable to XSS attacks through open redirects and path traversal in github.com/grafana/grafana
Affected products
- Go github.com/grafana/grafana
Junglewise Threat Intelligence
CVE-2025-6023: GO-2025-3817 - Grafana is vulnerable to XSS attacks through open redirects and path traversal in github.com/grafana/grafana
CVE-2025-6023 · Severity: low · CVSS 3.1 · Published 2025-07-29
Technologies: github.com/grafana/grafana (Go). Vendors: Go.
Related threats
- Grafana improper access control in service account token minting
- Grafana arbitrary file read in SQL Expressions
- Grafana OSS authorization bypass in provisioning contact points API
- Grafana XSS in Explore Traces view via Jaeger HTTP API
- GO-2025-4153 - Grafana Incorrect Privilege Assignment vulnerability in github.com/grafana/grafana