Lucene search

K
cnvdChina National Vulnerability DatabaseCNVD-2021-95242
HistoryNov 25, 2021 - 12:00 a.m.

Redash Code Issue Vulnerability (CNVD-2021-95242)

2021-11-2500:00:00
China National Vulnerability Database
www.cnvd.org.cn
16
redash
data integration
vulnerability
server-side request forgery
data sources

EPSS

0.001

Percentile

42.8%

Redash is a data integration and analysis solution from the Israeli company Redash. The product supports data integration, data visualization, query editing, and data sharing.Redash 10.0.0 and earlier versions are vulnerable to a code issue that stems from the fact that the program is vulnerable to server-side request forgery attacks when loading url data sources such as JSON, CSV, or Excel. No detailed vulnerability details are available at this time.

EPSS

0.001

Percentile

42.8%

Related for CNVD-2021-95242