CVE-2020-36144

Redash 8.0.0 is affected by LDAP Injection (CVE-2020-36144). The root cause is lack of sanitization of the username in the LDAP SEARCH TEMPLATE, leading to an information leak through specially crafted queries. Affected component: LDAP authentication path handling the search filter. Impact stated...