RHSA-2025:8679: Important: grafana security update
Grafana is an open source, feature rich metrics dashboard and graph editor for Graphite, InfluxDB & OpenTSDB. Security Fix(es): grafana: Cross-site Scripting (XSS) in Grafana via Custom Frontend Plugins and Open Redirect (CVE-2025-4123) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.
Affected Software
Remediation
Event History
Frequently Asked Questions
What is the severity of RHSA-2025:8679?
The severity of RHSA-2025:8679 is classified as important.
How do I fix RHSA-2025:8679?
To fix RHSA-2025:8679, update the Grafana package to version 7.5.11-6.el8_6 or later.
What vulnerabilities does RHSA-2025:8679 address?
RHSA-2025:8679 addresses Cross-site Scripting (XSS) in Grafana via Custom Frontend Plugins and Open Redirect (CVE-2025-4123).
Which Red Hat products are affected by RHSA-2025:8679?
Affected Red Hat products include Red Hat Enterprise Linux for SAP Solutions and Red Hat Enterprise Linux Server across multiple architectures.
What is the recommended action for users of Grafana regarding RHSA-2025:8679?
Users of Grafana should apply the latest security update to mitigate the identified vulnerabilities.