Cross-Site Scripting in Grafana via Client Path Traversal and Open Redirect
A cross-site scripting (XSS) vulnerability exists in Grafana due to a combination of client path traversal and open redirect. This allows attackers to redirect users to a website with a frontend plugin that can execute arbitrary JavaScript. The vulnerability does not require editor permissions and will work if anonymous access is enabled. If the Grafana Image Renderer plugin is installed, attackers can exploit the open redirect to achieve a full read SSRF. However, the default Content-Security-Policy (CSP) in Grafana will block the XSS through the `connect-src` directive.
| Vulnerable Product | Search on Vulmon | Subscribe to Product |
|---|---|---|
grafana grafana |
Over 46,000 Grafana instances exposed to account takeover bug By Bill Toulas June 15, 2025 10:07 AM 0 More than 46,000 internet-facing Grafana instances remain unpatched and exposed to a client-side open redirect vulnerability that allows executing a malicious plugin and account takeover. The flaw is tracked as CVE-2025-4123 and impacts multiple versions of the open-source platform used for monitoring and visualizing infrastructure and application metrics. The vulnerability was discovered by bug...
Vulmon