CVE-2025-6197

Published Jul 18, 2025

Last updated 13 hours ago

CVSS medium 4.2

Overview

Description
An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites for exploitation: - Multiple organizations must exist in the Grafana instance - Victim must be on a different organization than the one specified in the URL
Source
security@grafana.com
NVD status
Received

Risk scores

CVSS 3.1

Type
Secondary
Base score
4.2
Impact score
2.5
Exploitability score
1.6
Vector string
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:L/I:L/A:N
Severity
MEDIUM

Weaknesses

security@grafana.com
CWE-601

Social media

Hype score
Not currently trending

  1. CVE-2025-6197 An open redirect vulnerability has been identified in Grafana OSS organization switching functionality. Prerequisites for exploitation: - Multiple organizations must… https://t.co/4RPlwHCQQk

    @CVEnew

    18 Jul 2025

    271 Impressions

    0 Retweets

    0 Likes

    1 Bookmark

    0 Replies

    0 Quotes

References

Sources include official advisories and independent security research.