Very long unicode dashboard title can hang the frontend
Advisory ID: | CVE-2025-1088 |
Published: | 2025-06-17 |
Product: | Grafana |
CVSS Score: | 2.7 |
CVSS Vector: | CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:N/I:N/A:L |
Fixed Versions: | >=11.6.2 |
Summary
In Grafana, an excessively long dashboard title or panel name will cause Chromium browsers to become unresponsive due to Improper Input Validation vulnerability in Grafana.
This issue affects Grafana: before 11.6.2 and is fixed in 11.6.2 and higher.
Credits: Jinay Patel and Shrey Shah for identifying and reporting.