Lucene search

K
cvelistMitreCVELIST:CVE-2020-36144
HistoryMar 18, 2021 - 7:37 p.m.

CVE-2020-36144

2021-03-1819:37:28
mitre
www.cve.org
1
redash 8.0.0
ldap injection
information leak

EPSS

0.001

Percentile

26.7%

Redash 8.0.0 is affected by LDAP Injection. There is an information leak through the crafting of special queries, escaping the provided template since the username included in the search filter lacks sanitization.

EPSS

0.001

Percentile

26.7%

Related for CVELIST:CVE-2020-36144