Get a demo
100% Signal 0% Noise Invicti Logo - The Largest Dynamic Application Security Solutions Provider In The World Get a demo
Web Application Vulnerabilities Runtime SCA Findings
Looking for the vulnerability index of Invicti's legacy products?
Invicti Enterprise Acunetix Standard & Premium
Grafana Open Redirect (CVE-2025-4123) - Vulnerability Database

Grafana Open Redirect (CVE-2025-4123)

Description

Grafana is vulnerable to an open redirect vulnerability. The vulnerability allows attackers to craft URLs that redirect users to arbitrary destinations. This flaw can be chained with other attacks, such as Server-Side Request Forgery (SSRF) or Account Takeover (ATO).

Remediation

Upgrade to the latest version of Grafana

References

Grafana Security Blog Post
Research Article on Exploitation

Related Vulnerabilities

URL rewrite vulnerability Medium
Common tags: URL Redirection Known Vulnerabilities
Open Redirection Medium
Common tags: URL Redirection
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-0927) Medium
Common tags: Known Vulnerabilities
SharePoint Improper Neutralization of Input During Web Page Generation ('Cross-site Scripting') Vulnerability (CVE-2020-0891) Medium
Common tags: Known Vulnerabilities
SharePoint CVE-2020-0892 Vulnerability (CVE-2020-0892) High
Common tags: Known Vulnerabilities

Severity

High

Classification

CVE-2025-4123
CWE-601
CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L
CVSS:4.0/AV:N/AC:L/AT:P/PR:N/UI:P/VC:H/VI:L/VA:L/SC:N/SI:N/SA:N

Tags

URL Redirection
Known Vulnerabilities