(CVE-2025-4123) Grafana 路径遍历与开放重定向导致的跨站脚本漏洞

漏洞描述

PoC代码

暂无

相关漏洞推荐

• Grafana Grafana 权限管理不当漏洞
• Grafana Image Renderer 插件 需授权 文件上传限制不当漏洞 可导致远程代码执行
• Grafana存在重定向漏洞(CVE-2025-4123)
• Grafana /avatar 服务器端请求伪造漏洞（CVE-2020-13379）
• POC CVE-2019-15043: Grafana - Improper Access Control
• POC CVE-2020-11110: Grafana <= 6.7.1 - Cross-Site Scripting
• POC CVE-2020-13379: Grafana 3.0.1-7.0.1 - Server-Side Request Forgery
• POC CVE-2021-27358: Grafana Unauthenticated Snapshot Creation
• POC CVE-2021-39226: Grafana Snapshot - Authentication Bypass
• POC CVE-2021-41174: Grafana 8.0.0 <= v.8.2.2 - Angularjs Rendering Cross-Site Scripting
• POC CVE-2021-43798: Grafana v8.x - Arbitrary File Read
• POC CVE-2022-26148: Grafana & Zabbix Integration - Credentials Disclosure
• POC CVE-2024-9264: Grafana Post-Auth DuckDB - SQL Injection To File Read