{ "cveId": "CVE-2025-4123", "url": "https://patchblox.com/security/cve/CVE-2025-4123", "summary": "CVE-2025-4123 is fixed in 2 products on 1 platform, first by RHSA-2025:7892, released May 15, 2025. It is not reported as exploited. Patch Radar priority: High.", "title": "grafana: Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB \u0026 OpenTSDB", "description": "Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB \u0026 OpenTSDB. \n\nSecurity Fix(es):\n\n* grafana: Cross-site Scripting (XSS) in Grafana via Custom Frontend Plugins and Open Redirect (CVE-2025-4123)\n\nFor more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.", "published": "2025-05-15T03:49:32Z", "severity": "Important", "cvss": 7.6, "cvssVector": "CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L", "epss": 0.97083, "epssPercentile": 0.99892, "priority": "High", "priorityTier": 3, "exploited": false, "vendorExploited": false, "disclosed": false, "fixes": [ { "platform": "linux", "product": "grafana", "release": "RHEL 10", "fixedVersion": "10.2.6-17.el10_0", "fix": "RHSA-2025:7892", "url": "https://patchblox.com/security/fix/linux/rhsa-2025-7892", "released": "2025-05-15T03:49:32Z" }, { "platform": "linux", "product": "grafana", "release": "RHEL 8", "fixedVersion": "0:9.2.10-23.el8_10", "fix": "RHSA-2025:7894", "url": "https://patchblox.com/security/fix/linux/rhsa-2025-7894", "released": "2025-05-19T00:00:00Z" }, { "platform": "linux", "product": "grafana", "release": "RHEL 9", "fixedVersion": "0:10.2.6-13.el9_6", "fix": "RHSA-2025:7893", "url": "https://patchblox.com/security/fix/linux/rhsa-2025-7893", "released": "2025-05-19T00:00:00Z" }, { "platform": "linux", "product": "grafana", "release": "almalinux 8", "fixedVersion": "9.2.10-23.el8_10", "fix": "ALSA-2025:7894", "url": "https://patchblox.com/security/fix/linux/alsa-2025-7894", "released": "2025-05-19T00:00:00Z" }, { "platform": "linux", "product": "grafana", "release": "almalinux 9", "fixedVersion": "10.2.6-13.el9_6", "fix": "ALSA-2025:7893", "url": "https://patchblox.com/security/fix/linux/alsa-2025-7893", "released": "2025-05-19T00:00:00Z" }, { "platform": "linux", "product": "grafana", "release": "ol 10", "fixedVersion": "0:10.2.6-18.el10_0", "fix": "ELSA-2025-7892", "url": "https://patchblox.com/security/fix/linux/elsa-2025-7892", "released": "2025-06-30T00:00:00Z" }, { "platform": "linux", "product": "grafana", "release": "ol 8", "fixedVersion": "0:9.2.10-23.el8_10", "fix": "ELSA-2025-7894", "url": "https://patchblox.com/security/fix/linux/elsa-2025-7894", "released": "2025-05-19T00:00:00Z" }, { "platform": "linux", "product": "grafana", "release": "ol 9", "fixedVersion": "0:10.2.6-13.el9_6", "fix": "ELSA-2025-7893", "url": "https://patchblox.com/security/fix/linux/elsa-2025-7893", "released": "2025-05-22T00:00:00Z" }, { "platform": "linux", "product": "grafana", "release": "rocky 10", "fixedVersion": "0:10.2.6-17.el10_0", "fix": "RLSA-2025:7892", "url": "https://patchblox.com/security/fix/linux/rlsa-2025-7892", "released": "2025-10-03T19:56:45Z" }, { "platform": "linux", "product": "grafana", "release": "rocky 8", "fixedVersion": "0:9.2.10-23.el8_10", "fix": "RLSA-2025:7894", "url": "https://patchblox.com/security/fix/linux/rlsa-2025-7894", "released": "2025-07-29T13:38:41Z" }, { "platform": "linux", "product": "grafana", "release": "rocky 9", "fixedVersion": "0:10.2.6-13.el9_6", "fix": "RLSA-2025:7893", "url": "https://patchblox.com/security/fix/linux/rlsa-2025-7893", "released": "2025-10-04T00:11:30Z" }, { "platform": "linux", "product": "grafana-selinux", "release": "RHEL 8", "fixedVersion": "0:9.2.10-23.el8_10", "fix": "RHSA-2025:7894", "url": "https://patchblox.com/security/fix/linux/rhsa-2025-7894", "released": "2025-05-19T00:00:00Z" }, { "platform": "linux", "product": "grafana-selinux", "release": "RHEL 9", "fixedVersion": "0:10.2.6-13.el9_6", "fix": "RHSA-2025:7893", "url": "https://patchblox.com/security/fix/linux/rhsa-2025-7893", "released": "2025-05-19T00:00:00Z" }, { "platform": "linux", "product": "grafana-selinux", "release": "almalinux 8", "fixedVersion": "9.2.10-23.el8_10", "fix": "ALSA-2025:7894", "url": "https://patchblox.com/security/fix/linux/alsa-2025-7894", "released": "2025-05-19T00:00:00Z" }, { "platform": "linux", "product": "grafana-selinux", "release": "almalinux 9", "fixedVersion": "10.2.6-13.el9_6", "fix": "ALSA-2025:7893", "url": "https://patchblox.com/security/fix/linux/alsa-2025-7893", "released": "2025-05-19T00:00:00Z" }, { "platform": "linux", "product": "grafana-selinux", "release": "ol 10", "fixedVersion": "0:10.2.6-18.el10_0", "fix": "ELSA-2025-7892", "url": "https://patchblox.com/security/fix/linux/elsa-2025-7892", "released": "2025-06-30T00:00:00Z" }, { "platform": "linux", "product": "grafana-selinux", "release": "ol 8", "fixedVersion": "0:9.2.10-23.el8_10", "fix": "ELSA-2025-7894", "url": "https://patchblox.com/security/fix/linux/elsa-2025-7894", "released": "2025-05-19T00:00:00Z" }, { "platform": "linux", "product": "grafana-selinux", "release": "ol 9", "fixedVersion": "0:10.2.6-13.el9_6", "fix": "ELSA-2025-7893", "url": "https://patchblox.com/security/fix/linux/elsa-2025-7893", "released": "2025-05-22T00:00:00Z" } ], "noFixYet": [], "dataAsOf": "2026-11-08T13:06:02Z", "attribution": { "text": "Data: Patchblox Patch Radar", "url": "https://patchblox.com/security/patch-radar", "terms": "https://patchblox.com/security/patch-radar/use-the-data" } }