CVE-2025-41117 | Grafana/Grafana Enterprise up to 12.2.4/12.3.2 Jaeger HTTP API injection

A vulnerability has been found in Grafana and Grafana Enterprise up to 12.2.4/12.3.2 and classified as problematic. This impacts an unknown function of the component Jaeger HTTP API. The manipulation leads to injection.

This vulnerability is documented as CVE-2025-41117. The attack can be initiated remotely. There is not any exploit available.

The affected component should be upgraded.