{"id":"CVE-2025-3415","aliases":["GHSA-46m5-8hpj-p5p5","GO-2025-3814"],"url":"https://o3.security/vulnerability/CVE-2025-3415","summary":null,"details":"Grafana is an open-source platform for monitoring and observability. The Grafana Alerting DingDing integration was not properly protected and could be exposed to users with Viewer permission. \nFixed in versions 10.4.19+security-01, 11.2.10+security-01, 11.3.7+security-01, 11.4.5+security-01, 11.5.5+security-01, 11.6.2+security-01 and 12.0.1+security-01","published":"2025-07-22T05:41:15.588Z","modified":"2025-07-29T19:44:40.498557Z","cvss":null,"epss":{"score":0.00983,"percentile":0.60649,"asOf":"2026-09-17"},"cisaKev":null,"exploitsKnown":0,"affectedPackages":[{"ecosystem":"Bitnami","name":"grafana","fixedVersion":"10.4.19"}],"fix":null,"references":[{"type":"WEB","url":"https://grafana.com/security/security-advisories/cve-2025-3415"},{"type":"WEB","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3415"}],"provenance":{"sources":["OSV.dev","FIRST.org (EPSS)"],"lastVerified":"2025-07-29T19:44:40.498557Z"}}