Skip to content
CVE PROGRAM SOURCE RECORD4.3 Medium

CVE-2025-10630

Regex DoS in Grafana Zabbix Plugin

Description

Grafana is an open-source platform for monitoring and observability. Grafana-Zabbix is a plugin for Grafana allowing to visualize monitoring data from Zabbix and create dashboards for analyzing metrics and realtime monitoring.  Versions 5.2.1 and below contained a ReDoS vulnerability via user-supplied regex query which could causes CPU usage to max out. This vulnerability is fixed in version 6.0.0.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Grafana grafana-zabbix-plugin

Default version status: affected

  • 0 to < 6.0.2affected

References