CVE-2020-36144: Medium severity redash vulnerability
Published Mar 18, 2021
·Updated
Redash 8.0.0 is affected by LDAP Injection. There is an information leak through the crafting of special queries, escaping the provided template since the username included in the search filter lacks sanitization.
Affected Software
1 affected component
Redash Redash=8.0.0
Event History
Mar 18, 2021
CVE Published
via MITRE·07:37 PM
Data Sourced
via MITRE·07:37 PM
Description
Frequently Asked Questions
1
What is CVE-2020-36144?
CVE-2020-36144 is a vulnerability in Redash 8.0.0 that allows LDAP injection and causes an information leak through specially crafted queries.
2
How does CVE-2020-36144 impact Redash?
CVE-2020-36144 allows an attacker to perform LDAP injection, leading to an information leak in Redash 8.0.0.
3
What is the severity of CVE-2020-36144?
CVE-2020-36144 has a severity rating of medium with a CVSS score of 5.3.
4
How can CVE-2020-36144 be fixed?
To fix CVE-2020-36144, it is recommended to upgrade Redash to a version that includes the necessary fixes.
5
Where can I find more information about CVE-2020-36144?
You can find more information about CVE-2020-36144 in the Redash GitHub repository and the release notes.