Open Redirect in Organization Switching in Grafana
Medium
- Advisory ID:
- CVE-2025-6197
- Published:
- 2025-07-18
- Product:
- Grafana
- CVSS Score:
- 4.2
- CVSS Vector:
- CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
- Fixed Versions:
- >=12.0.2+security-01>=11.6.3+security-01>=11.5.6+security-01>=11.4.6+security-01>=11.3.8+security-01
Summary
An open redirect vulnerability has been identified in Grafana organization switching functionality.
Prerequisites for exploitation:
- Multiple organizations must exist in the Grafana instance
- Victim must be on a different organization than the one specified in the URL
Fixed in versions 12.0.2+security-01, 11.6.3+security-01, 11.5.6+security-01, 11.4.6+security-01 and 11.3.8+security-01
UPDATE: Thanks to dat2phit_opswat for reporting a bypass of this fix. Versions 12.1.2, 12.0.5, 11.6.6, 11.5.9, 11.4.9 have a fix for this bypass.