Security Advisories
CVEs affecting projects tracked on Release Alert, from NVD & OSV.
CVE-2020-36144
5.3
MEDIUMCVSS v3
Published
March 18, 2021
CVSS v2
4.3 MEDIUM
Affected
2 projects
Assigned by
MITRE
Severity scale
010
Description
Redash 8.0.0 is affected by LDAP Injection. There is an information leak through the crafting of special queries, escaping the provided template since the username included in the search filter lacks sanitization.
getredash/redash
GitHubMake Your Company Data Driven. Connect to any data source, easily visualize, dashboard and share your data.
GitHubMake Your Company Data Driven. Connect to any data source, easily visualize, dashboard and share your data.= 8.0.0NVD