PT-2020-13229
CVE-2020-12725
·
تاريخ النشر
2020-06-11
·
تاريخ التحديث
2024-03-06
الوصف من
CVSS 3.1
7.2
عاليةالمقاييسAV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
Name of the Vulnerable Software and Affected Versions
Redash open-source versions 8.0.0 and prior
Description
An authenticated Server-Side Request Forgery (SSRF) was discovered via the
JSON data source. This issue provides flexibility in crafting HTTP requests, such as adding headers and selecting any HTTP verb. Possibly, other connectors are affected.Recommendations
For Redash open-source versions 8.0.0 and prior, consider disabling the
JSON data source as a temporary workaround until a patch is available. Restrict access to potentially vulnerable connectors to minimize the risk of exploitation.قابلية الاستغلال
استغلال
إصلاح
التأثيرات
المورّدون
المنتجات المتأثرة
وجدت خطأً في الوصف؟ لديك ما تضيفه؟ لا تتردد في مراسلتنا 👾