BIT-grafana-2025-1088

vendorUSosv

Very long unicode dashboard title or panel name can hang the frontend

view advisory published 2025-06-20Licence: per source

In Grafana, an excessively long dashboard title or panel name will cause Chromium browsers to become unresponsive due to Improper Input Validation vulnerability in Grafana. This issue affects Grafana: before 11.6.2 and is fixed in 11.6.2 and higher.

describes (1)

Related CVEs.

ID	severity	EPSS	exploitable	published
CVE-2025-1088US	—	0.47% (39th)	—	2025-06-18
In Grafana, an excessively long dashboard title or panel name will cause Chromium browsers to become unresponsive due to Improper Input Validation vulnerability in Grafana. This is…

references

External citations — patches, advisories, analysis.

https://grafana.com/security/security-advisories/cve-2025-1088/WEB
https://nvd.nist.gov/vuln/detail/CVE-2025-1088WEB

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan