{"action":"Upgrade github.com/grafana/grafana to 0.0.0-20250521183405-c7a690348df7 or later.","affected":[{"fixed":"0.0.0-20250521183405-c7a690348df7","introduced":"0.0.0-20250114093457-36d6fad421fb"}],"component":"github.com/grafana/grafana","cve_ids":["CVE-2025-3260"],"ecosystem":"Go","epss":0.0056,"exploited":false,"fixed_versions":["0.0.0-20250521183405-c7a690348df7"],"ghsa_id":"GHSA-3px7-c4j3-576r","id":"tcs_01M5KEV4VV19ZHZ7D4JM0ZZCWP","modified_at":"2026-09-10T03:50:24.785306297Z","published_at":"2025-06-02T12:30:33Z","references":["https://osv.dev/vulnerability/GHSA-3px7-c4j3-576r","https://nvd.nist.gov/vuln/detail/CVE-2025-3260","https://github.com/grafana/grafana","https://github.com/grafana/grafana/blob/be8d153dc33734caba4f617ff571d18253e68fa0/CHANGELOG.md#1161-2025-04-23","https://grafana.com/blog/2025/04/22/grafana-security-release-medium-and-high-severity-fixes-for-cve-2025-3260-cve-2025-2703-cve-2025-3454","https://grafana.com/security/security-advisories/CVE-2025-3260"],"severity":{"label":"high","score":8.3},"sources":[{"source":"osv","source_id":"GHSA-3px7-c4j3-576r","url":"https://osv.dev/vulnerability/GHSA-3px7-c4j3-576r"}],"summary":"Grafana vulnerable to authenticated users bypassing dashboard, folder permissions"}