Skip to content
OpenAdvisories
High ELSA-2025-7893 1 CVE

Important: grafana security update (Oracle Linux 9)

Published May 22, 2025 · Updated May 22, 2025

Ecosystem: Oracle Linux

Summary

[10.2.6-13]
- Resolves RHEL-89954: CVE-2025-4123

[10.2.6-12]
- Resolves RHEL-88922: Move home directory of grafana to /var/lib/grafana

[10.2.6-11]
- Resolves RHEL-84636: CVE-2025-30204

[10.2.6-10]
- Resolves RHEL-75919: grafana selinux issue with autofs_t

Fixed packages 2

ReleasePackageFixed in
Oracle Linux · 9 grafana 0:10.2.6-13.el9_6
Oracle Linux · 9 grafana-selinux 0:10.2.6-13.el9_6

Vulnerabilities 1

  • High 7.6
    CVE-2025-4123 Public exploit Scanner template EPSS 97%

    Grafana Cross-Site-Scripting (XSS) via custom loaded frontend plugin

    A cross-site scripting (XSS) vulnerability exists in Grafana caused by combining a client path traversal and open redirect. This allows attackers to redirect users to a website that hosts a frontend plugin that will execute arbitrary JavaScript. This vulnerab…

    Grafana Grafana grafana github.com/grafana/grafana Web / CMS Ubuntu Go