Description
Grafana 存在钉钉KEY泄露漏洞，攻击者可利用此漏洞获取钉钉KEY。
Grafana钉钉KEY泄露漏洞（CVE-2025-3415）
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://nvd.nist.gov/vuln/detail/CVE-2025-3415
https://grafana.com/blog/grafana-security-update-medium-severity-security-release-for-cve-2025-3415/
https://ddpoc.com/DVB-2025-9483.html
https://stack.chaitin.com/poc/detail/5043
https://github.com/projectdiscovery/nuclei-templates/blob/main/http/cves/2025/CVE-2025-3415.yaml
https://www.miggo.io/vulnerability-database/cve/CVE-2025-3415
https://knowledge.broadcom.com/external/article/420461/cve20253415-grafana-alerting-dingding-i.html
https://securityonline.info/grafana-alert-medium-severity-flaw-cve-2025-3415-exposes-dingding-api-keys/