CVE-2025-6023 SUSE CVE security@suse.de SUSE Security Team SUSE CVE-2025-6023 Interim 1 5 2026-03-05T01:30:33Z current 2025-08-05T23:39:39Z 2026-03-05T01:30:33Z cve-database/bin/generate-cvrf-cve.pl 2020-12-27T01:00:00Z CVE-2025-6023 An open redirect vulnerability has been identified in Grafana OSS that can be exploited to achieve XSS attacks. The vulnerability was introduced in Grafana v11.5.0. The open redirect can be chained with path traversal vulnerabilities to achieve XSS. Fixed in versions 12.0.2+security-01, 11.6.3+security-01, 11.5.6+security-01, 11.4.6+security-01 and 11.3.8+security-01 The CVRF data is provided by SUSE under the Creative Commons License 4.0 with Attribution (CC-BY-4.0). https://lists.suse.com/pipermail/sle-security-updates/2025-October/023071.html E-Mail link for SUSE-SU-2025:3817-1 https://lists.suse.com/pipermail/sle-security-updates/2025-October/023070.html E-Mail link for SUSE-SU-2025:3819-1 https://lists.suse.com/pipermail/sle-security-updates/2025-December/023598.html E-Mail link for SUSE-SU-2025:4457-1 https://lists.suse.com/pipermail/sle-security-updates/2025-December/023628.html E-Mail link for SUSE-SU-2025:4458-1 https://lists.suse.com/pipermail/sle-security-updates/2025-December/023614.html E-Mail link for SUSE-SU-2025:4482-1 https://www.suse.com/support/security/rating/ SUSE Security Ratings SUSE Linux Enterprise Module for Package Hub 15 SP6 SUSE Linux Enterprise Module for Package Hub 15 SP7 SUSE Linux Enterprise Server 16.0 SUSE Manager Client Tools 12 SUSE Manager Client Tools 15 SUSE Manager Client Tools for SLE Micro 5 SUSE Multi Linux Manager Tools SLE-12 SUSE Multi Linux Manager Tools SLE-15 SUSE Multi Linux Manager Tools SLE-Micro-5 openSUSE Leap 15.6 openSUSE Tumbleweed Multi-Linux-ManagerTools-SLE-release-12-120002.1.3.2 Multi-Linux-ManagerTools-SLE-release-POOL-12-120002.1.3.2 dracut-saltboot-1.0.0-150000.1.62.1 dracut-saltboot-1.0.0-150002.3.3.1 golang-github-prometheus-alertmanager-0.28.1-1.34.1 golang-github-prometheus-alertmanager-0.28.1-120002.4.3.2 golang-github-prometheus-alertmanager-0.28.1-150002.4.3.3 govulncheck-vulndb-0.0.20250730T213748-1.1 govulncheck-vulndb-0.0.20250814T182633-160000.1.2 grafana-11.5.10-1.87.1 grafana-11.5.10-150000.1.87.1 grafana-11.5.10-150200.3.80.1 grafana-11.5.7-120002.4.3.2 grafana-11.5.7-150002.4.3.3 grafana-11.6.3+security01-1.1 mgr-push-5.0.3-1.30.3 mgr-push-5.0.3-150000.1.30.1 mgr-push-5.1.4-120002.3.3.3 mgr-push-5.1.4-150002.3.3.3 mgrctl-0.1.37-1.27.1 mgrctl-0.1.37-150000.1.27.1 mgrctl-5.1.20-150002.3.3.3 mgrctl-bash-completion-0.1.37-1.27.1 mgrctl-bash-completion-0.1.37-150000.1.27.1 mgrctl-bash-completion-5.1.20-150002.3.3.3 mgrctl-lang-0.1.37-150000.1.27.1 mgrctl-lang-5.1.20-150002.3.3.3 mgrctl-zsh-completion-0.1.37-1.27.1 mgrctl-zsh-completion-0.1.37-150000.1.27.1 mgrctl-zsh-completion-5.1.20-150002.3.3.3 python-defusedxml-0.6.0-120002.1.3.1 python2-mgr-push-5.0.3-1.30.3 python2-mgr-push-5.1.4-120002.3.3.3 python2-rhnlib-5.0.6-21.55.1 python2-rhnlib-5.1.3-120002.3.3.1 python2-spacewalk-client-tools-5.1.7-120002.3.3.2 python3-defusedxml-0.7.1-150002.1.3.2 python3-mgr-push-5.0.3-150000.1.30.1 python3-mgr-push-5.1.4-150002.3.3.3 python3-rhnlib-5.0.6-150000.3.49.1 python3-rhnlib-5.1.3-150002.3.3.2 python3-spacewalk-client-tools-5.1.7-150002.3.3.3 spacecmd-5.0.14-150000.3.139.1 spacecmd-5.0.14-38.162.1 spacecmd-5.1.11-120002.3.3.2 spacecmd-5.1.11-150002.3.3.2 spacewalk-client-tools-5.1.7-120002.3.3.2 spacewalk-client-tools-5.1.7-150002.3.3.3 supportutils-plugin-susemanager-client-5.0.5-150000.3.30.1 supportutils-plugin-susemanager-client-5.0.5-6.36.1 supportutils-plugin-susemanager-client-5.1.4-120002.3.3.1 supportutils-plugin-susemanager-client-5.1.4-150002.3.3.2 grafana-11.5.10-150200.3.80.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP6 grafana-11.5.10-150200.3.80.1 as a component of SUSE Linux Enterprise Module for Package Hub 15 SP7 govulncheck-vulndb-0.0.20250814T182633-160000.1.2 as a component of SUSE Linux Enterprise Server 16.0 golang-github-prometheus-alertmanager-0.28.1-1.34.1 as a component of SUSE Manager Client Tools 12 grafana-11.5.10-1.87.1 as a component of SUSE Manager Client Tools 12 mgr-push-5.0.3-1.30.3 as a component of SUSE Manager Client Tools 12 mgrctl-0.1.37-1.27.1 as a component of SUSE Manager Client Tools 12 mgrctl-bash-completion-0.1.37-1.27.1 as a component of SUSE Manager Client Tools 12 mgrctl-zsh-completion-0.1.37-1.27.1 as a component of SUSE Manager Client Tools 12 python2-mgr-push-5.0.3-1.30.3 as a component of SUSE Manager Client Tools 12 python2-rhnlib-5.0.6-21.55.1 as a component of SUSE Manager Client Tools 12 spacecmd-5.0.14-38.162.1 as a component of SUSE Manager Client Tools 12 supportutils-plugin-susemanager-client-5.0.5-6.36.1 as a component of SUSE Manager Client Tools 12 dracut-saltboot-1.0.0-150000.1.62.1 as a component of SUSE Manager Client Tools 15 grafana-11.5.10-150000.1.87.1 as a component of SUSE Manager Client Tools 15 mgr-push-5.0.3-150000.1.30.1 as a component of SUSE Manager Client Tools 15 mgrctl-0.1.37-150000.1.27.1 as a component of SUSE Manager Client Tools 15 mgrctl-bash-completion-0.1.37-150000.1.27.1 as a component of SUSE Manager Client Tools 15 mgrctl-lang-0.1.37-150000.1.27.1 as a component of SUSE Manager Client Tools 15 mgrctl-zsh-completion-0.1.37-150000.1.27.1 as a component of SUSE Manager Client Tools 15 python3-mgr-push-5.0.3-150000.1.30.1 as a component of SUSE Manager Client Tools 15 python3-rhnlib-5.0.6-150000.3.49.1 as a component of SUSE Manager Client Tools 15 spacecmd-5.0.14-150000.3.139.1 as a component of SUSE Manager Client Tools 15 supportutils-plugin-susemanager-client-5.0.5-150000.3.30.1 as a component of SUSE Manager Client Tools 15 dracut-saltboot-1.0.0-150000.1.62.1 as a component of SUSE Manager Client Tools for SLE Micro 5 mgrctl-0.1.37-150000.1.27.1 as a component of SUSE Manager Client Tools for SLE Micro 5 mgrctl-bash-completion-0.1.37-150000.1.27.1 as a component of SUSE Manager Client Tools for SLE Micro 5 mgrctl-lang-0.1.37-150000.1.27.1 as a component of SUSE Manager Client Tools for SLE Micro 5 mgrctl-zsh-completion-0.1.37-150000.1.27.1 as a component of SUSE Manager Client Tools for SLE Micro 5 Multi-Linux-ManagerTools-SLE-release-12-120002.1.3.2 as a component of SUSE Multi Linux Manager Tools SLE-12 Multi-Linux-ManagerTools-SLE-release-POOL-12-120002.1.3.2 as a component of SUSE Multi Linux Manager Tools SLE-12 golang-github-prometheus-alertmanager-0.28.1-120002.4.3.2 as a component of SUSE Multi Linux Manager Tools SLE-12 grafana-11.5.7-120002.4.3.2 as a component of SUSE Multi Linux Manager Tools SLE-12 mgr-push-5.1.4-120002.3.3.3 as a component of SUSE Multi Linux Manager Tools SLE-12 python-defusedxml-0.6.0-120002.1.3.1 as a component of SUSE Multi Linux Manager Tools SLE-12 python2-mgr-push-5.1.4-120002.3.3.3 as a component of SUSE Multi Linux Manager Tools SLE-12 python2-rhnlib-5.1.3-120002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-12 python2-spacewalk-client-tools-5.1.7-120002.3.3.2 as a component of SUSE Multi Linux Manager Tools SLE-12 spacecmd-5.1.11-120002.3.3.2 as a component of SUSE Multi Linux Manager Tools SLE-12 spacewalk-client-tools-5.1.7-120002.3.3.2 as a component of SUSE Multi Linux Manager Tools SLE-12 supportutils-plugin-susemanager-client-5.1.4-120002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-12 dracut-saltboot-1.0.0-150002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-15 golang-github-prometheus-alertmanager-0.28.1-150002.4.3.3 as a component of SUSE Multi Linux Manager Tools SLE-15 grafana-11.5.7-150002.4.3.3 as a component of SUSE Multi Linux Manager Tools SLE-15 mgr-push-5.1.4-150002.3.3.3 as a component of SUSE Multi Linux Manager Tools SLE-15 mgrctl-5.1.20-150002.3.3.3 as a component of SUSE Multi Linux Manager Tools SLE-15 mgrctl-bash-completion-5.1.20-150002.3.3.3 as a component of SUSE Multi Linux Manager Tools SLE-15 mgrctl-lang-5.1.20-150002.3.3.3 as a component of SUSE Multi Linux Manager Tools SLE-15 mgrctl-zsh-completion-5.1.20-150002.3.3.3 as a component of SUSE Multi Linux Manager Tools SLE-15 python3-defusedxml-0.7.1-150002.1.3.2 as a component of SUSE Multi Linux Manager Tools SLE-15 python3-mgr-push-5.1.4-150002.3.3.3 as a component of SUSE Multi Linux Manager Tools SLE-15 python3-rhnlib-5.1.3-150002.3.3.2 as a component of SUSE Multi Linux Manager Tools SLE-15 python3-spacewalk-client-tools-5.1.7-150002.3.3.3 as a component of SUSE Multi Linux Manager Tools SLE-15 spacecmd-5.1.11-150002.3.3.2 as a component of SUSE Multi Linux Manager Tools SLE-15 spacewalk-client-tools-5.1.7-150002.3.3.3 as a component of SUSE Multi Linux Manager Tools SLE-15 supportutils-plugin-susemanager-client-5.1.4-150002.3.3.2 as a component of SUSE Multi Linux Manager Tools SLE-15 dracut-saltboot-1.0.0-150002.3.3.1 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5 mgrctl-5.1.20-150002.3.3.3 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5 mgrctl-bash-completion-5.1.20-150002.3.3.3 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5 mgrctl-lang-5.1.20-150002.3.3.3 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5 mgrctl-zsh-completion-5.1.20-150002.3.3.3 as a component of SUSE Multi Linux Manager Tools SLE-Micro-5 dracut-saltboot-1.0.0-150000.1.62.1 as a component of openSUSE Leap 15.6 grafana-11.5.10-150200.3.80.1 as a component of openSUSE Leap 15.6 spacecmd-5.0.14-150000.3.139.1 as a component of openSUSE Leap 15.6 supportutils-plugin-susemanager-client-5.0.5-150000.3.30.1 as a component of openSUSE Leap 15.6 govulncheck-vulndb-0.0.20250730T213748-1.1 as a component of openSUSE Tumbleweed grafana-11.6.3+security01-1.1 as a component of openSUSE Tumbleweed An open redirect vulnerability has been identified in Grafana OSS that can be exploited to achieve XSS attacks. The vulnerability was introduced in Grafana v11.5.0. The open redirect can be chained with path traversal vulnerabilities to achieve XSS. Fixed in versions 12.0.2+security-01, 11.6.3+security-01, 11.5.6+security-01, 11.4.6+security-01 and 11.3.8+security-01 CVE-2025-6023 SUSE Linux Enterprise Module for Package Hub 15 SP6:grafana-11.5.10-150200.3.80.1 SUSE Linux Enterprise Module for Package Hub 15 SP7:grafana-11.5.10-150200.3.80.1 SUSE Linux Enterprise Server 16.0:govulncheck-vulndb-0.0.20250814T182633-160000.1.2 SUSE Manager Client Tools 12:golang-github-prometheus-alertmanager-0.28.1-1.34.1 SUSE Manager Client Tools 12:grafana-11.5.10-1.87.1 SUSE Manager Client Tools 12:mgr-push-5.0.3-1.30.3 SUSE Manager Client Tools 12:mgrctl-0.1.37-1.27.1 SUSE Manager Client Tools 12:mgrctl-bash-completion-0.1.37-1.27.1 SUSE Manager Client Tools 12:mgrctl-zsh-completion-0.1.37-1.27.1 SUSE Manager Client Tools 12:python2-mgr-push-5.0.3-1.30.3 SUSE Manager Client Tools 12:python2-rhnlib-5.0.6-21.55.1 SUSE Manager Client Tools 12:spacecmd-5.0.14-38.162.1 SUSE Manager Client Tools 12:supportutils-plugin-susemanager-client-5.0.5-6.36.1 SUSE Manager Client Tools 15:dracut-saltboot-1.0.0-150000.1.62.1 SUSE Manager Client Tools 15:grafana-11.5.10-150000.1.87.1 SUSE Manager Client Tools 15:mgr-push-5.0.3-150000.1.30.1 SUSE Manager Client Tools 15:mgrctl-0.1.37-150000.1.27.1 SUSE Manager Client Tools 15:mgrctl-bash-completion-0.1.37-150000.1.27.1 SUSE Manager Client Tools 15:mgrctl-lang-0.1.37-150000.1.27.1 SUSE Manager Client Tools 15:mgrctl-zsh-completion-0.1.37-150000.1.27.1 SUSE Manager Client Tools 15:python3-mgr-push-5.0.3-150000.1.30.1 SUSE Manager Client Tools 15:python3-rhnlib-5.0.6-150000.3.49.1 SUSE Manager Client Tools 15:spacecmd-5.0.14-150000.3.139.1 SUSE Manager Client Tools 15:supportutils-plugin-susemanager-client-5.0.5-150000.3.30.1 SUSE Manager Client Tools for SLE Micro 5:dracut-saltboot-1.0.0-150000.1.62.1 SUSE Manager Client Tools for SLE Micro 5:mgrctl-0.1.37-150000.1.27.1 SUSE Manager Client Tools for SLE Micro 5:mgrctl-bash-completion-0.1.37-150000.1.27.1 SUSE Manager Client Tools for SLE Micro 5:mgrctl-lang-0.1.37-150000.1.27.1 SUSE Manager Client Tools for SLE Micro 5:mgrctl-zsh-completion-0.1.37-150000.1.27.1 SUSE Multi Linux Manager Tools SLE-12:Multi-Linux-ManagerTools-SLE-release-12-120002.1.3.2 SUSE Multi Linux Manager Tools SLE-12:Multi-Linux-ManagerTools-SLE-release-POOL-12-120002.1.3.2 SUSE Multi Linux Manager Tools SLE-12:golang-github-prometheus-alertmanager-0.28.1-120002.4.3.2 SUSE Multi Linux Manager Tools SLE-12:grafana-11.5.7-120002.4.3.2 SUSE Multi Linux Manager Tools SLE-12:mgr-push-5.1.4-120002.3.3.3 SUSE Multi Linux Manager Tools SLE-12:python-defusedxml-0.6.0-120002.1.3.1 SUSE Multi Linux Manager Tools SLE-12:python2-mgr-push-5.1.4-120002.3.3.3 SUSE Multi Linux Manager Tools SLE-12:python2-rhnlib-5.1.3-120002.3.3.1 SUSE Multi Linux Manager Tools SLE-12:python2-spacewalk-client-tools-5.1.7-120002.3.3.2 SUSE Multi Linux Manager Tools SLE-12:spacecmd-5.1.11-120002.3.3.2 SUSE Multi Linux Manager Tools SLE-12:spacewalk-client-tools-5.1.7-120002.3.3.2 SUSE Multi Linux Manager Tools SLE-12:supportutils-plugin-susemanager-client-5.1.4-120002.3.3.1 SUSE Multi Linux Manager Tools SLE-15:dracut-saltboot-1.0.0-150002.3.3.1 SUSE Multi Linux Manager Tools SLE-15:golang-github-prometheus-alertmanager-0.28.1-150002.4.3.3 SUSE Multi Linux Manager Tools SLE-15:grafana-11.5.7-150002.4.3.3 SUSE Multi Linux Manager Tools SLE-15:mgr-push-5.1.4-150002.3.3.3 SUSE Multi Linux Manager Tools SLE-15:mgrctl-5.1.20-150002.3.3.3 SUSE Multi Linux Manager Tools SLE-15:mgrctl-bash-completion-5.1.20-150002.3.3.3 SUSE Multi Linux Manager Tools SLE-15:mgrctl-lang-5.1.20-150002.3.3.3 SUSE Multi Linux Manager Tools SLE-15:mgrctl-zsh-completion-5.1.20-150002.3.3.3 SUSE Multi Linux Manager Tools SLE-15:python3-defusedxml-0.7.1-150002.1.3.2 SUSE Multi Linux Manager Tools SLE-15:python3-mgr-push-5.1.4-150002.3.3.3 SUSE Multi Linux Manager Tools SLE-15:python3-rhnlib-5.1.3-150002.3.3.2 SUSE Multi Linux Manager Tools SLE-15:python3-spacewalk-client-tools-5.1.7-150002.3.3.3 SUSE Multi Linux Manager Tools SLE-15:spacecmd-5.1.11-150002.3.3.2 SUSE Multi Linux Manager Tools SLE-15:spacewalk-client-tools-5.1.7-150002.3.3.3 SUSE Multi Linux Manager Tools SLE-15:supportutils-plugin-susemanager-client-5.1.4-150002.3.3.2 SUSE Multi Linux Manager Tools SLE-Micro-5:dracut-saltboot-1.0.0-150002.3.3.1 SUSE Multi Linux Manager Tools SLE-Micro-5:mgrctl-5.1.20-150002.3.3.3 SUSE Multi Linux Manager Tools SLE-Micro-5:mgrctl-bash-completion-5.1.20-150002.3.3.3 SUSE Multi Linux Manager Tools SLE-Micro-5:mgrctl-lang-5.1.20-150002.3.3.3 SUSE Multi Linux Manager Tools SLE-Micro-5:mgrctl-zsh-completion-5.1.20-150002.3.3.3 openSUSE Leap 15.6:dracut-saltboot-1.0.0-150000.1.62.1 openSUSE Leap 15.6:grafana-11.5.10-150200.3.80.1 openSUSE Leap 15.6:spacecmd-5.0.14-150000.3.139.1 openSUSE Leap 15.6:supportutils-plugin-susemanager-client-5.0.5-150000.3.30.1 openSUSE Tumbleweed:govulncheck-vulndb-0.0.20250730T213748-1.1 openSUSE Tumbleweed:grafana-11.6.3+security01-1.1 important 7.6 CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:U/C:H/I:L/A:L