ExploitPublished
Grafana 11.6.0 · SSRF
Source Exploit-DB RSS Feed
0
Severity
MediumRated by Threat Radar
Data as of 22 Apr 2026, 07:07 UTC
What to do
AI-suggested
Until an official fix is available, it is recommended to restrict or disable anonymous access and vulnerable plugins such as Image Renderer to reduce exposure. Monitor vendor communications for updates and apply official patches once released.
Description
Grafana 11.6.0 - SSRF
Indicators of compromise
Exploit source code
# Exploit Title: Grafana 11.6.0 - SSRF
# FOFA: app="Grafana"
# Date: 2-11-2025
# Exploit Author: Beatriz Fresno Naumova
# Vendor Homepage: https://grafana.com/
# Software Link: https://grafana.com/grafana/download
# Version: 11.2.0 - 11.6.0
# CVE: CVE-2025-4123
Description:
An SSRF (Server-Side Request Forgery) vulnerability exists in Grafana's `render/public` (and related public rendering) endpoints owing to a combination of client-side path traversal encoding and an open redirect. Under cer…References
Community reviews
Loading reviews…