← Back to browse · API

CVE-2025-6197

Severity
MEDIUM
CVSS
4.2
EPSS
0.66785
Risk score
40.17
CISA KEV
No
PoC
Yes
Published
2025-07-18
Modified
2025-07-18
First seen
2026-08-07
Aliases
EUVD-2025-21862, GHSA-JVCJ-QC86-J594
Products
Grafana:Grafana 11.3.x <11.3.8+security-01, Grafana:Grafana 11.4.x <11.4.6+security-01, Grafana:Grafana 11.5.x <11.5.6+security-01, Grafana:Grafana 11.6.x <11.6.3+security-01, Grafana:Grafana 12.0.x <12.0.2+security-01, linux, suse
Sources
euvd EUVD-2025-21862
packetstorm 496861f679ec6d9293af2fde|CVE-2025-6197

Description

An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites for exploitation: - Multiple organizations must exist in the Grafana instance - Victim must be on a different organization than the one specified in the URL

References