Low WID-SEC-2025-2567 2 CVEs

Grafana: Mehrere Schwachstellen ermöglichen Offenlegung von Informationen

Published Nov 11, 2025 · Updated Nov 11, 2025 · de-DE

Vendor: Grafana Product: Grafana Platform: Linux Platform: Windows

Summary

Ein Angreifer kann mehrere Schwachstellen in Grafana ausnutzen, um Informationen offenzulegen.

Product

Grafana ist eine Open-Source Analyse- und Visualisierungssoftware.

Vulnerabilities 2

Low 2.1

CVE-2025-3717

Incorrect oauth passthrough in Grafana Snowflake Datasource

When using the Grafana Snowflake Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in the wrong user identifier being used, a…

Grafana Grafana Snowflake Datasource Plugin Web / CMS

Nov 11, 2025
Low 2.1

CVE-2025-41116

Incorrect oauth passthrough in Grafana Databricks Datasource

When using the Grafana Databricks Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, it could result in the wrong user identifier being used, …

Grafana Grafana Databricks Datasource Plugin Web / CMS

Nov 11, 2025

Revision history

2025-11-11 #1
Initiale Fassung

References

Grafana Security Advisory CVE-2025-3717 vom 2025-11-11
https://grafana.com/security/security-advisories/cve-2025-3717/
Grafana Security Advisory CVE-2025-41116 vom 2025-11-11
https://grafana.com/security/security-advisories/cve-2025-41116/