Description
No description available.
Grafana Image Renderer 插件 需授权 文件上传限制不当漏洞 可导致远程代码执行
PoC
None yet. Search at https://trap.biu.life/?ref=rssReferences
https://grafana.com/security/security-advisories/cve-2025-11539/
https://cn-sec.com/archives/4564878.html
https://zeropath.com/blog/cve-2025-11539-grafana-image-renderer-rce-summary
https://cybersecuritywriteups.com/render-unto-risk-cve-2025-11539-and-the-fragility-of-grafanas-image-renderer-5acb10358c48
https://www.bleepingcomputer.com/news/security/grafana-releases-critical-security-update-for-image-renderer-plugin/