Grafana CVE-2025-6023 Bypass: A Technical Deep Dive
ethiack.com | vulnerability | High | CVE-2025-6023 | #vulnerability-research | #attack-chains | #xss | #path-traversal | #open-redirect | #grafana | #ethiack | #cve-2025-6023
Summary
Ethiack analyzes a bypass of Grafana's CVE-2025-6023 fix, chaining a server-side open redirect with client-side path traversal to load an external script, achieving XSS and full account takeover.
- CVE
- CVE-2025-6023
- CVSS
- 7.6
- Published
- Collected
--- id: 5608 title: "Grafana CVE-2025-6023 Bypass: A Technical Deep Dive" cve: CVE-2025-6023 cvss: 7.6 severity: high source_domain: ethiack.com source_url: "https://ethiack.com/info-hub/research/grafana-cve-2025-6023-bypass-a-technical-deep-dive" published_at: "2025-11-27T00:00:00Z" tags: ["vulnerability-research", "attack-chains", "xss", "path-traversal", "open-redirect", "grafana", "ethiack", "cve-2025-6023"] phying_url: "https://phying.com/item/5608" lang: en --- # Grafana CVE-2025-6023 Bypass: A Technical Deep Dive ## Summary Ethiack analyzes a bypass of Grafana's CVE-2025-6023 fix, chaining a server-side open redirect with client-side path traversal to load an external script, achieving XSS and full account takeover. ## Intelligence Metadata - **Sources:** ethiack.com - **CVE:** CVE-2025-6023 - **CVSS:** 7.6 - **Published:** 2025-11-27T00:00:00Z - **Original:** https://ethiack.com/info-hub/research/grafana-cve-2025-6023-bypass-a-technical-deep-dive - **Phying News:** https://phying.com/item/5608