Getredash Redash vulnerabilities
- getredash redash Redash: DuckDB query runner allows arbitrary file read/write via unrestricted external access 9.3 Critical
- getredash redash Redash: JSON data source query URL can bypass base URL restriction 4.9 Medium
- getredash redash Redash: SQL Injection via Query Results parameterized query substitution 8.7 High
- getredash redash Redash: Open redirect vulnerability in post-login redirect handling 6.1 Medium
- getredash redash Server-Side Request Forgery (SSRF) in Redash 6.8 Medium
- getredash redash Insecure default configuration 8.1 High
- getredash redash Vulnerability in Redash OAuth2 flows due to misuse of state field (should be a nonce) 6.8 Medium