CVE-2020-12725

HIGH

redash < 8.0.0 - Authenticated Server-Side Request Forgery via JSON Data Source

Title source: llm
STIX 2.1

Description

Havoc Research discovered an authenticated Server-Side Request Forgery (SSRF) via the "JSON" data source of Redash open-source 8.0.0 and prior. Possibly, other connectors are affected. The SSRF is potent and provides a lot of flexibility in terms of being able to craft HTTP requests e.g., by adding headers, selecting any HTTP verb, etc.

References (3)

Core 3
Core References
Vendor Advisory x_refsource_misc
https://blog.redash.io
Patch, Vendor Advisory x_refsource_misc
https://github.com/getredash/redash/commits/master
Exploit, Vendor Advisory x_refsource_misc
https://github.com/getredash/redash/issues/4869

Scores

CVSS v3 7.2
EPSS 0.0132
EPSS Percentile 67.2%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Details

CWE
CWE-918
Status published
Products (1)
redash/redash < 8.0.0
Published Jun 11, 2020
Tracked Since Feb 18, 2026