Unscored CVE-2020-36144 EUVD-2020-23722GHSA-j9jc-frfv-jf2p

Redash 8.0.0 is affected by LDAP Injection. There is an information leak through the crafting of special queries, escaping the provided tem…

Published Mar 18, 2021 · Updated Aug 4, 2024 · Assigned by mitre

Description

Redash 8.0.0 is affected by LDAP Injection. There is an information leak through the crafting of special queries, escaping the provided template since the username included in the search filter lacks sanitization.

References

https://github.com/getredash/redash/releases
https://github.com/getredash/redash/issues/5426