Go/github.com/grafana/grafana CVE-2025-6023: high 7.6, EPSS 57.74%
Grafana is vulnerable to XSS attacks through open redirects and path traversal in github.com/grafana/grafana
Action: No fix published. Pin and monitor.
Affected
| introduced | fixed | last affected |
|---|---|---|
| 0 | - | - |
Fixed versions
No fixed version in the source.
Sources
- osv: GO-2025-3817
- nvd: CVE-2025-6023
- https://github.com/advisories/GHSA-vqph-p5vc-g644
- https://github.com/grafana/grafana/commit/0ba0b99665a946cd96676ef85ec8bc83028cb1d7
- https://github.com/grafana/grafana/commit/40ed88fe86d347bcde5ddaed6c4a20a95d2f0d55
- https://github.com/grafana/grafana/commit/5b00e21638f565eed46acb4d0b7c009968df4c3b
- https://github.com/grafana/grafana/commit/b6dd2b70c655c61b111b328f1a7dcca6b3954936
- https://github.com/grafana/grafana/commit/e0ba4b480954f8a33aa2cff3229f6bcc05777bd9
- https://github.com/grafana/grafana
- https://grafana.com/blog/2025/07/17/grafana-security-release-medium-and-high-severity-fixes-for-cve-2025-6197-and-cve-2025-6023
- https://grafana.com/security/security-advisories/cve-2025-6023
CVE-2025-6023 · published · modified · JSON