CVE-2025-6197
CVE-2025-6197
This page contains facts from public vulnerability sources. Check the original advisory before updating.
An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites for exploitation: - Multiple organizations must exist in the Grafana instance - Victim must be on a different organization than the one specified in the URL
CVSS 4.2 · Medium · EPSS 70.1% · Public exploit · Fix available
- Published
- Updated
Stack: system · applications
Affected products and versions
grafana
- Versions
- ≥ 12.0.x, < 12.0.2+security-01: Affected (semver)
- ≥ 11.6.x, < 11.6.3+security-01: Affected (semver)
- ≥ 11.5.x, < 11.5.6+security-01: Affected (semver)
- ≥ 11.4.x, < 11.4.6+security-01: Affected (semver)
- ≥ 11.3.x, < 11.3.8+security-01: Affected (semver)
Update to 11.3.8+security-01; Update to 11.4.6+security-01; Update to 11.5.6+security-01; Update to 11.6.3+security-01; Update to 12.0.2+security-01
grafana Ubuntu:16.04:LTS
- Versions
- 2.6.0+dfsg-1
- Affected ranges
- ECOSYSTEM: (−∞, +∞)
No fix published