Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-95241
HistoryNov 25, 2021 - 12:00 a.m.

Redash input validation error vulnerability

2021-11-2500:00:00
China National Vulnerability Database
www.cnvd.org.cn
8
redash
input validation error
vulnerability
google sign-in
redirection
implementation
data integration
analysis
israeli company
cnvd

EPSS

0.001

Percentile

20.9%

Redash is a data integration and analysis solution from the Israeli company Redash. Redash 10.0.0 and earlier versions are vulnerable to an input validation error, which stems from the program’s implementation of the Google sign-in feature that does not properly use the "state" parameter to pass the next URL to redirect the user after signing in. No detailed vulnerability details are available at this time.

EPSS

0.001

Percentile

20.9%

Related for CNVD-2021-95241