CVE-2025-6197: grafana URL Redirection to Untrusted Site
Vulnerability summary
CVE-2025-6197 is a medium (CVSS 4.2) URL Redirection to Untrusted Site vulnerability in grafana. EPSS estimates a 70.14% chance of exploitation in the next 30 days, higher than 99.3% of scored vulnerabilities.
Not severe (CVSS 4.2, network access); no exploitation reported by the 5 checked sources
Source freshness unavailable
How is this decided?Advisory lineage
Upstream 0 · Downstream 6 · Related 6Timeline
- 18-07-2025PublishedVulnerability first disclosed.
- 18-07-2025Last modifiedVulnerability information updated.
Description
An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites for exploitation: - Multiple organizations must exist in the Grafana instance - Victim must be on a different organization than the one specified in the URL
CVSS metrics
3 scores · 3 sources · 1 version- OSV · UbuntuEcosystem advisory · calculated4.2MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
- NVDNIST4.2MediumCVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
EPSS trend
Probability
70.14%
Chance of exploitation in the next 30 days
Percentile
99%
Versus all other CVEs
30-day change
Decrease -2.15 pp
From 72.29% on 04-10-2026
Known exploited
Compare KEV catalogs
CISA KEVNot in the CISA KEV catalog.
ENISA CNWNot in the ENISA CNW catalog.
CIRCLNot in the CIRCL catalog.
Public exploits
0 foundNo public exploits indexed.
Weaknesses
CWE · root causeAffected systems
Known conditions: network-reachable, no authentication, user interaction (CVSS vector). Other conditions: not stated in public data.
Grafana1 product
- grafana≥ 12.0.x, < 12.0.2+security-01 | ≥ 11.6.x, < 11.6.3+security-01 | ≥ 11.5.x, < 11.5.6+security-01 | ≥ 11.4.x, < 11.4.6+security-01 | ≥ 11.3.x, < 11.3.8+security-01
Ubuntu1 product
- grafanaAll versions (No fix recorded)
2 vendors · 2 products