PT-2025-25459
CVE-2025-3415
·
Published
2025-06-14
·
Updated
2026-04-21
Description by
CVSS 3.1
4.3
MediumMetricsAV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N
Name of the Vulnerable Software and Affected Versions
Grafana (affected versions not specified)
Description
A medium-severity flaw in Grafana Alerting exposes sensitive DingDing contact point URLs to viewers. This issue may lead to data exposure.
Recommendations
Update to a patched version to resolve the issue.
As a temporary workaround, consider disabling the DingDing integration until a patch is available.
Found an issue in the description? Have something to add? Feel free to write us 👾