CVE-2020-36144

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2020-36144
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-36144.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2020-36144
Aliases
Published
2021-03-18T20:15:13.020Z
Modified
2026-07-09T01:30:07.904435Z
Severity
  • 5.3 (Medium) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:N/A:N CVSS Calculator
Summary
[none]
Details

Redash 8.0.0 is affected by LDAP Injection. There is an information leak through the crafting of special queries, escaping the provided template since the username included in the search filter lacks sanitization.

References

Affected packages

Git / github.com/getredash/redash

Affected ranges

Type
GIT
Repo
https://github.com/getredash/redash
Events
Introduced
a16f551e22c6288df6f067aa12caa5afd9a8f1dd
Last affected
a16f551e22c6288df6f067aa12caa5afd9a8f1dd
Database specific 
{
    "cpe": "cpe:2.3:a:redash:redash:8.0.0:*:*:*:*:*:*:*",
    "source": "CPE_STRING",
    "extracted_events": [
        {
            "introduced": "8.0.0"
        },
        {
            "last_affected": "8.0.0"
        }
    ]
}

Affected versions

8.*
8.0.0
v8.*
v8.0.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2020-36144.json"