CVE-2025-3717

N/A Unknown
Published: November 11, 2025 Modified: November 12, 2025

Description

When using the Grafana Snowflake Datasource Plugin, if Oauth passthrough is enabled on the datasource, and multiple users are using the same datasource at the same time on a single Grafana instance, itΒ  could result inΒ  the wrong user identifier being used, and information for which the viewer is not authorized being returned.Β  This issue affects Grafana Snowflake Datasource Plugin: from 1.5.0 before 1.14.1.

AI Explanation

Get an AI-powered plain-language explanation of this vulnerability and remediation steps.

Login to generate AI explanation

References to Advisories, Solutions, and Tools

Patch Vendor Advisory Exploit Third Party Advisory

1 reference(s) from NVD

Quick Stats

CVSS v3 Score
N/A / 10.0
EPSS (Exploit Probability)
0.1%
17th percentile
Exploitation Status
Not in CISA KEV

Weaknesses (CWE)