Skip to content
OpenAdvisories
Medium · 4.3 Scanner template CVE-2025-3415 BIT-grafana-2025-3415EUVD-2025-21759GHSA-46m5-8hpj-p5p5GO-2025-3814

Grafana's insecure DingDing Alert integration exposes sensitive information

Published Jul 17, 2025 · Updated Jul 17, 2025 · Assigned by GRAFANA

Vendor: Grafana Product: Grafana Package: github.com/grafana/grafana Package: grafana Category: Web / CMS Ecosystem: Go Ecosystem: Ubuntu

Description

Grafana is an open-source platform for monitoring and observability. The Grafana Alerting DingDing integration was not properly protected and could be exposed to users with Viewer permission.
Fixed in versions 10.4.19+security-01, 11.2.10+security-01, 11.3.7+security-01, 11.4.5+security-01, 11.5.5+security-01, 11.6.2+security-01 and 12.0.1+security-01

Affected products

VendorProductAffectedFixed
Grafana Grafana 10.4.x – < 10.4.19+security-01, 11.2.x – < 11.2.10+security-01, 11.3.x – < 11.3.7+security-01, 11.4.x – < 11.4.5+security-01, 11.5.x – < 11.5.5+security-01, 11.6.x – < 11.6.2+security-01, 12.0.x – < 12.0.1+security-01 10.4.19+security-01

Fixed in Linux distributions

Distributions backport fixes, so the version that fixes this vulnerability differs per release — upgrade to at least the version shown. From the distributions' security trackers and advisories.

Ubuntu

Security tracker ↗
ReleasePackageFixed inAdvisory
Ubuntu 16.04 LTS grafana No fix yet —

SUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
SLES 15 SP7 golang-github-prometheus-promu 0.17.0-150000.3.30.1 SUSE-SU-2026:1013-1
SLES 15 SP7 grafana 11.5.10-150200.3.80.1 SUSE-SU-2026:1037-1, SUSE-SU-2025:4482-1
SLES 15 SP6 grafana 11.5.10-150200.3.80.1 SUSE-SU-2025:4482-1
Show 8 more (older releases, extended support, other products)
ReleasePackageFixed inAdvisory
SUSE Multi Linux Manager Tools SLE-Micro-5 dracut-saltboot 1.0.0-150002.3.3.1 SUSE-SU-2025:3819-1
SUSE Multi Linux Manager Tools SLE-Micro-5 prometheus-blackbox_exporter 0.26.0-150002.3.6.1 SUSE-SU-2026:1524-1
SUSE Multi Linux Manager Tools SLE-Micro-5 uyuni-tools 5.1.20-150002.3.3.3 SUSE-SU-2026:1524-1, SUSE-SU-2025:3819-1
SUSE Multi Linux Manager Tools SLE-15 dracut-saltboot 1.0.0-150002.3.3.1 SUSE-SU-2025:3819-1
SUSE Multi Linux Manager Tools SLE-15 golang-github-lusitaniae-apache_exporter 1.0.10-150002.3.6.1 SUSE-SU-2026:1524-1
SUSE Multi Linux Manager Tools SLE-15 golang-github-prometheus-alertmanager 0.28.1-150002.4.3.3 SUSE-SU-2025:3819-1
SUSE Multi Linux Manager Tools SLE-15 golang-github-prometheus-prometheus 3.5.0-150002.3.8.1 SUSE-SU-2026:1524-1
SUSE Multi Linux Manager Tools SLE-15 grafana 11.5.7-150002.4.3.3 SUSE-SU-2026:1524-1, SUSE-SU-2025:3819-1
SUSE Multi Linux Manager Tools SLE-15 mgr-push 5.1.4-150002.3.3.3 SUSE-SU-2025:3819-1
SUSE Multi Linux Manager Tools SLE-15 prometheus-blackbox_exporter 0.26.0-150002.3.6.1 SUSE-SU-2026:1524-1
SUSE Multi Linux Manager Tools SLE-15 python-defusedxml 0.7.1-150002.1.3.2 SUSE-SU-2025:3819-1
SUSE Multi Linux Manager Tools SLE-15 rhnlib 5.1.3-150002.3.3.2 SUSE-SU-2025:3819-1
SUSE Multi Linux Manager Tools SLE-15 spacecmd 5.1.11-150002.3.3.2 SUSE-SU-2026:1524-1, SUSE-SU-2025:3819-1
SUSE Multi Linux Manager Tools SLE-15 spacewalk-client-tools 5.1.7-150002.3.3.3 SUSE-SU-2025:3819-1
SUSE Multi Linux Manager Tools SLE-15 supportutils-plugin-susemanager-client 5.1.4-150002.3.3.2 SUSE-SU-2025:3819-1
SUSE Multi Linux Manager Tools SLE-15 uyuni-tools 5.1.20-150002.3.3.3 SUSE-SU-2026:1524-1, SUSE-SU-2025:3819-1
SUSE Multi Linux Manager Tools SLE-12 Multi-Linux-ManagerTools-SLE-release 12-120002.1.3.2 SUSE-SU-2025:3817-1
SUSE Multi Linux Manager Tools SLE-12 golang-github-prometheus-alertmanager 0.28.1-120002.4.3.2 SUSE-SU-2025:3817-1
SUSE Multi Linux Manager Tools SLE-12 grafana 11.5.7-120002.4.3.2 SUSE-SU-2025:3817-1
SUSE Multi Linux Manager Tools SLE-12 mgr-push 5.1.4-120002.3.3.3 SUSE-SU-2025:3817-1
SUSE Multi Linux Manager Tools SLE-12 python-defusedxml 0.6.0-120002.1.3.1 SUSE-SU-2025:3817-1
SUSE Multi Linux Manager Tools SLE-12 rhnlib 5.1.3-120002.3.3.1 SUSE-SU-2025:3817-1
SUSE Multi Linux Manager Tools SLE-12 spacecmd 5.1.11-120002.3.3.2 SUSE-SU-2025:3817-1
SUSE Multi Linux Manager Tools SLE-12 spacewalk-client-tools 5.1.7-120002.3.3.2 SUSE-SU-2025:3817-1
SUSE Multi Linux Manager Tools SLE-12 supportutils-plugin-susemanager-client 5.1.4-120002.3.3.1 SUSE-SU-2025:3817-1
SUSE Multi Linux Manager Tools Beta SLE-Micro-5 Multi-Linux-ManagerTools-Beta-SLE-Micro-release 5-159000.3.3.1 SUSE-SU-2026:1148-1
SUSE Multi Linux Manager Tools Beta SLE-Micro-5 dracut-saltboot 1.1.0-159000.2.2.1 SUSE-SU-2026:1148-1
SUSE Multi Linux Manager Tools Beta SLE-Micro-5 dracut-wireless 0.1.1595937550.0285244-159000.2.2.1 SUSE-SU-2026:1148-1
SUSE Multi Linux Manager Tools Beta SLE-Micro-5 golang-github-prometheus-node_exporter 1.9.1-159000.4.2.1 SUSE-SU-2026:1148-1
SUSE Multi Linux Manager Tools Beta SLE-Micro-5 uyuni-tools 5.2.5-159000.2.3.2 SUSE-SU-2026:1148-1
SUSE Multi Linux Manager Tools Beta SLE-Micro-5 venv-salt-minion 3006.0-159000.5.3.2 SUSE-SU-2026:1148-1
SUSE Multi Linux Manager Tools Beta SLE-15 dracut-saltboot 1.1.0-159000.2.2.1 SUSE-SU-2026:1148-1
SUSE Multi Linux Manager Tools Beta SLE-15 dracut-wireless 0.1.1595937550.0285244-159000.2.2.1 SUSE-SU-2026:1148-1
SUSE Multi Linux Manager Tools Beta SLE-15 golang-github-QubitProducts-exporter_exporter 0.4.0-159000.2.2.1 SUSE-SU-2026:1148-1
SUSE Multi Linux Manager Tools Beta SLE-15 golang-github-boynux-squid_exporter 1.13.0-159000.2.2.1 SUSE-SU-2026:1148-1
SUSE Multi Linux Manager Tools Beta SLE-15 golang-github-lusitaniae-apache_exporter 1.0.10-159000.2.2.1 SUSE-SU-2026:1148-1
SUSE Multi Linux Manager Tools Beta SLE-15 golang-github-prometheus-alertmanager 0.28.1-159000.12.2.1 SUSE-SU-2026:1148-1
SUSE Multi Linux Manager Tools Beta SLE-15 golang-github-prometheus-node_exporter 1.9.1-159000.4.2.1 SUSE-SU-2026:1148-1
SUSE Multi Linux Manager Tools Beta SLE-15 golang-github-prometheus-prometheus 3.5.0-159000.4.3.2 SUSE-SU-2026:1148-1
SUSE Multi Linux Manager Tools Beta SLE-15 grafana 11.6.11-159000.2.3.2 SUSE-SU-2026:1148-1
SUSE Multi Linux Manager Tools Beta SLE-15 mgr-push +1 5.2.3-159000.2.3.1 SUSE-SU-2026:1148-1
SUSE Multi Linux Manager Tools Beta SLE-15 prometheus-blackbox_exporter 0.26.0-159000.2.2.1 SUSE-SU-2026:1148-1
SUSE Multi Linux Manager Tools Beta SLE-15 prometheus-postgres_exporter 0.10.1-159000.2.2.1 SUSE-SU-2026:1148-1
SUSE Multi Linux Manager Tools Beta SLE-15 python-defusedxml 0.7.1-159000.4.2.1 SUSE-SU-2026:1148-1
SUSE Multi Linux Manager Tools Beta SLE-15 rhnlib +1 5.2.4-159000.4.3.1 SUSE-SU-2026:1148-1
SUSE Multi Linux Manager Tools Beta SLE-15 spacecmd 5.2.6-159000.4.3.1 SUSE-SU-2026:1148-1
SUSE Multi Linux Manager Tools Beta SLE-15 supportutils-plugin-salt 1.2.3-159000.4.2.1 SUSE-SU-2026:1148-1
SUSE Multi Linux Manager Tools Beta SLE-15 supportutils-plugin-susemanager-client 5.2.2-159000.4.2.1 SUSE-SU-2026:1148-1
SUSE Multi Linux Manager Tools Beta SLE-15 uyuni-tools 5.2.5-159000.2.3.2 SUSE-SU-2026:1148-1
SUSE Multi Linux Manager Tools Beta SLE-15 venv-salt-minion 3006.0-159000.5.3.2 SUSE-SU-2026:1148-1
SUSE Manager Client Tools for SLE Micro 5 dracut-saltboot 1.0.0-150000.1.62.1 SUSE-SU-2026:1013-1, SUSE-SU-2025:4458-1
SUSE Manager Client Tools for SLE Micro 5 golang-github-QubitProducts-exporter_exporter 0.4.0-150000.1.21.1 SUSE-SU-2026:1013-1
SUSE Manager Client Tools for SLE Micro 5 prometheus-blackbox_exporter 0.26.0-150000.1.30.2 SUSE-SU-2026:1013-1
SUSE Manager Client Tools for SLE Micro 5 uyuni-tools 0.1.37-150000.1.27.1 SUSE-SU-2026:1013-1, SUSE-SU-2025:4458-1
SUSE Manager Client Tools 15 dracut-saltboot 1.0.0-150000.1.62.1 SUSE-SU-2026:1013-1, SUSE-SU-2025:4458-1
SUSE Manager Client Tools 15 golang-github-QubitProducts-exporter_exporter 0.4.0-150000.1.21.1 SUSE-SU-2026:1013-1
SUSE Manager Client Tools 15 golang-github-boynux-squid_exporter 1.13.0-150000.1.12.1 SUSE-SU-2026:1013-1
SUSE Manager Client Tools 15 golang-github-lusitaniae-apache_exporter 1.0.10-150000.1.26.1 SUSE-SU-2026:1013-1
SUSE Manager Client Tools 15 golang-github-prometheus-prometheus 3.5.0-150000.3.67.1 SUSE-SU-2026:1013-1
SUSE Manager Client Tools 15 grafana 11.5.10-150000.1.87.1 SUSE-SU-2026:1013-1, SUSE-SU-2025:4458-1
SUSE Manager Client Tools 15 mgr-push 5.0.3-150000.1.30.1 SUSE-SU-2025:4458-1
SUSE Manager Client Tools 15 prometheus-blackbox_exporter 0.26.0-150000.1.30.2 SUSE-SU-2026:1013-1
SUSE Manager Client Tools 15 rhnlib 5.0.6-150000.3.49.1 SUSE-SU-2025:4458-1
SUSE Manager Client Tools 15 spacecmd 5.0.14-150000.3.139.1 SUSE-SU-2026:1013-1, SUSE-SU-2025:4458-1
SUSE Manager Client Tools 15 supportutils-plugin-susemanager-client 5.0.5-150000.3.30.1 SUSE-SU-2025:4458-1
SUSE Manager Client Tools 15 uyuni-tools 0.1.37-150000.1.27.1 SUSE-SU-2026:1013-1, SUSE-SU-2025:4458-1
SUSE Manager Client Tools 12 golang-github-prometheus-alertmanager 0.28.1-1.34.1 SUSE-SU-2025:4457-1
SUSE Manager Client Tools 12 grafana 11.5.10-1.87.1 SUSE-SU-2025:4457-1
SUSE Manager Client Tools 12 mgr-push 5.0.3-1.30.3 SUSE-SU-2025:4457-1
SUSE Manager Client Tools 12 rhnlib 5.0.6-21.55.1 SUSE-SU-2025:4457-1
SUSE Manager Client Tools 12 spacecmd 5.0.14-38.162.1 SUSE-SU-2025:4457-1
SUSE Manager Client Tools 12 supportutils-plugin-susemanager-client 5.0.5-6.36.1 SUSE-SU-2025:4457-1
SUSE Manager Client Tools 12 uyuni-tools 0.1.37-1.27.1 SUSE-SU-2025:4457-1

openSUSE

Security tracker ↗
ReleasePackageFixed inAdvisory
openSUSE Tumbleweed govulncheck-vulndb 0.0.20250730T213748-1.1 openSUSE-SU-2025:15405-1
openSUSE Tumbleweed grafana 11.6.3-1.1 openSUSE-SU-2025:15226-1
openSUSE Leap 15.6 dracut-saltboot 1.0.0-150000.1.62.1 SUSE-SU-2026:1013-1, SUSE-SU-2025:4458-1
openSUSE Leap 15.6 golang-github-QubitProducts-exporter_exporter 0.4.0-150000.1.21.1 SUSE-SU-2026:1013-1
openSUSE Leap 15.6 golang-github-boynux-squid_exporter 1.13.0-150000.1.12.1 SUSE-SU-2026:1013-1
openSUSE Leap 15.6 golang-github-lusitaniae-apache_exporter 1.0.10-150000.1.26.1 SUSE-SU-2026:1013-1
openSUSE Leap 15.6 golang-github-prometheus-promu 0.17.0-150000.3.30.1 SUSE-SU-2026:1013-1
openSUSE Leap 15.6 grafana 11.5.10-150200.3.80.1 SUSE-SU-2026:1037-1, SUSE-SU-2025:4482-1
openSUSE Leap 15.6 prometheus-blackbox_exporter 0.26.0-150000.1.30.2 SUSE-SU-2026:1013-1
openSUSE Leap 15.6 spacecmd 5.0.14-150000.3.139.1 SUSE-SU-2026:1013-1, SUSE-SU-2025:4458-1
openSUSE Leap 15.6 supportutils-plugin-susemanager-client 5.0.5-150000.3.30.1 SUSE-SU-2025:4458-1

Automated scanner template

A ready-made Nuclei template detects this vulnerability automatically. Vulnerabilities with public scanner templates are typically probed across the internet soon after the template appears — exposed systems should be patched first.

Source: projectdiscovery/nuclei-templates (MIT) — updated daily. Only links are listed.

Affected packages

EcosystemPackageAffectedFixedRecord
Go github.com/grafana/grafana < 1.9.2-0.20250514160932-04111e9f2afd 1.9.2-0.20250514160932-04111e9f2afd GHSA-46m5-8hpj-p5p5
Go github.com/grafana/grafana all versions — GO-2025-3814

Advisories 13

References