Priority HIGH 75
Redash is a package for data visualization and sharing.
getredash
Records9All Threatist records
Exploited (KEV)0None in CISA KEV
CVSS critical1CVSS 9.0–10.0
CVSS high4CVSS 7.0–8.9
Exploited now
getredash records in CISA KEVNo getredash vulnerabilities are listed in CISA KEV.
Components
Products in the NVD configurations · select one to filter the recordsRecords
9 records
Priority HIGH 73
Redash is a package for data visualization and sharing.
TI-2021-18031 CVE-2021-41192
Insecure default configuration
Priority MEDIUM 46
Redash is a package for data visualization and sharing.
TI-2021-19587 CVE-2021-43780
Server-Side Request Forgery (SSRF) in Redash
Priority MEDIUM 40
Redash is a package for data visualization and sharing.
TI-2020-10116 CVE-2020-12725 · GHSA-h4v9-xq3w-85jp
Havoc Research discovered an authenticated Server-Side Request Forgery (SSRF) via the…
Priority LOW 34
Havoc Research discovered an authenticated Server-Side Request Forgery (SSRF) via the "JSON" data source of Redash open-source 8.0.0 and prior.
TI-2021-19584 CVE-2021-43777
Vulnerability in Redash OAuth2 flows due to misuse of state field (should be a nonce)
Priority LOW 30
Redash is a package for data visualization and sharing.
Priority LOW 27
Redash is a package for data visualization and sharing.
TI-2020-18468 CVE-2020-36144 · GHSA-j9jc-frfv-jf2p
Redash 8.0.0 is affected by LDAP Injection.
Priority LOW 26
Redash 8.0.0 is affected by LDAP Injection.
Priority LOW 23
Redash is a package for data visualization and sharing.