PT-2021-23926 · Google · Google Login

Name of the Vulnerable Software and Affected Versions: Redash versions 10.0 and prior Description: The implementation of Google Login in Redash incorrectly uses the state parameter to pass the next URL to redirect the user to after login, instead of using it for a Cross-Site Request Forgery CSRF...