CVE-2025-10630mediumCWE-20

CVE-2025-10630: medium-severity vulnerability in grafana-zabbix-plugin

Regex DoS in Grafana Zabbix Plugin

Published · Updated

Follow this CVE+ Monitor grafana-zabbix-plugin+ Monitor github.com/alexanderzobnin/grafana-zabbix

E-mail alert when it lands in KEV, gets a public PoC or its score goes up.

13Vexday Risk Score

No sign of exploitation. No public exploitation artifact known so far.

ssvc Trackcvss 4.3epss 0.4%
Grafana is an open-source platform for monitoring and observability. Grafana-Zabbix is a plugin for Grafana allowing to visualize monitoring data from Zabbix and create dashboards for analyzing metrics and realtime monitoring.  Versions 5.2.1 and below contained a ReDoS vulnerability via user-supplied regex query which could causes CPU usage to max out. This vulnerability is fixed in version 6.0.0.
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:L
Affected products
Grafana · grafana-zabbix-plugin