CVE-2025-3415CWE-200

Grafana is an open-source platform for monitoring and observability

Medium · published July 17, 2025

CVSS v3.1
4.3
EPSS
1%
Percentile
64.9
In the wild
Unconfirmed
What it is

Grafana is an open-source platform for monitoring and observability. The Grafana Alerting DingDing integration was not properly protected and could be exposed to users with Viewer permission.

Fixed in versions 10.4.19+security-01, 11.2.10+security-01, 11.3.7+security-01, 11.4.5+security-01, 11.5.5+security-01, 11.6.2+security-01 and 12.0.1+security-01

The record
Technical detail
CVSS v3.1
4.3 · MEDIUM
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
CVSS v4.0
Not supplied
EPSS
0.01083 · 64.9th percentile
Weakness
CWE-200 · Exposure of Sensitive Information to an Unauthorized Actor
Published
2025-07-17T10:13Z
EPSS history
Timeline
  • 17 JUL 10:13Z
    Grafana is an open-source platform for monitoring and observability
    cvelistv5