Red Hat Security Advisory

RHSA-2025:8680

grafana security update

Released 2025-06-09 · Red Hat rating Important · View on Red Hat →

Fixed in

TI-2025-03662 CVE-2025-4123 · GHSA-q53q-gxq9-mgrj

HIGH 78

A cross-site scripting (XSS) vulnerability exists in Grafana caused by combining a client path traversal and open redirect.

CVSS 3.1HIGH 7.6 Network No auth User interaction EPSS 0.97083 Published 2025-05-22 Fixed in 10.4.19, 11.2.10 +6 CWE-601

TI-2025-16743 CVE-2025-22871 · GHSA-g9pc-8g42-g6vq

MEDIUM 49

The net/http package improperly accepts a bare LF as a line terminator in chunked data chunk-size lines.

CVSS 3.1CRITICAL 9.1 Network No auth No interaction EPSS 0.00842 Published 2025-04-08 Partial fix · 1.23.8, 1.24.2 +1 CWE-1395