---
id: 5608
title: "Grafana CVE-2025-6023 Bypass: A Technical Deep Dive"
cve: CVE-2025-6023
cvss: 7.6
severity: high
source_domain: ethiack.com
source_url: "https://ethiack.com/info-hub/research/grafana-cve-2025-6023-bypass-a-technical-deep-dive"
published_at: "2025-11-27T00:00:00Z"
tags: ["vulnerability-research", "attack-chains", "xss", "path-traversal", "open-redirect", "grafana", "ethiack", "cve-2025-6023"]
phying_url: "https://phying.com/item/5608"
lang: en
---

# Grafana CVE-2025-6023 Bypass: A Technical Deep Dive

## Summary

Ethiack analyzes a bypass of Grafana's CVE-2025-6023 fix, chaining a server-side open redirect with client-side path traversal to load an external script, achieving XSS and full account takeover.

## Intelligence Metadata

- **Sources:** ethiack.com
- **CVE:** CVE-2025-6023
- **CVSS:** 7.6
- **Published:** 2025-11-27T00:00:00Z
- **Original:** https://ethiack.com/info-hub/research/grafana-cve-2025-6023-bypass-a-technical-deep-dive
- **Phying News:** https://phying.com/item/5608