Skip to content
Grafana CVE-2025-6023 Bypass: A Technical Deep Dive
ethiack.com | vulnerability | High | CVE-2025-6023 | #vulnerability-research | #attack-chains | #xss | #path-traversal | #open-redirect | #grafana | #ethiack | #cve-2025-6023
Summary
Ethiack analyzes a bypass of Grafana's CVE-2025-6023 fix, chaining a server-side open redirect with client-side path traversal to load an external script, achieving XSS and full account takeover.
- CVSS
- 7.6
- Published
- Collected